AS396982: Google LLC
HoneyLabs honeypots recorded 231,282 probes from AS396982 (Google LLC) in the last 7 days, originating from 2,762 distinct source IP addresses.
First observed 2026-08-08 14:49:00, most recently 2026-08-15 14:48:45 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 80 | 1,046 |
| 3389 | 962 |
| 990 | 642 |
| 21 | 610 |
| 143 | 593 |
| 23 | 569 |
| 110 | 507 |
| 445 | 323 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 162.216.150.37 | 769 | United States | |
| 147.185.132.169 | 603 | United States | |
| 34.87.187.183 | 570 | Singapore | |
| 162.216.150.115 | 568 | United States | |
| 162.216.149.124 | 555 | United States | |
| 35.203.211.156 | 487 | United Kingdom | |
| 147.185.132.92 | 445 | United States | |
| 162.216.149.110 | 431 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 153,935 |
| United Kingdom | 70,741 |
| Belgium | 5,817 |
| Singapore | 617 |
| Taiwan | 139 |
| Brazil | 18 |
Client strings it sends
| User agent | Probes |
|---|---|
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 200,408 |
| Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 10,953 |
| python-requests/2.32.5 | 1,219 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 Edg/150.0.0.0 | 1,080 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | 515 |
ASN report
ASN report
Loading live data…