AS396982: Google LLC
HoneyLabs honeypots recorded 173,234 probes from AS396982 (Google LLC) in the last 7 days, originating from 2,754 distinct source IP addresses.
First observed 2026-09-24 12:20:39, most recently 2026-10-01 12:20:14 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 443 | 4,221 |
| 3389 | 904 |
| 8080 | 867 |
| 80 | 540 |
| 143 | 480 |
| 23 | 417 |
| 110 | 410 |
| 8443 | 395 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 35.187.246.147 | 773 | Singapore | |
| 35.203.210.12 | 602 | United Kingdom | |
| 162.216.149.42 | 540 | United States | |
| 34.89.245.228 | 532 | Germany | |
| 162.216.150.126 | 507 | United States | |
| 207.175.110.40 | 466 | Belgium | |
| 136.90.54.131 | 462 | United States | |
| 35.203.211.74 | 398 | United Kingdom |
Where it comes from
| Country | Probes |
|---|---|
| United States | 110,568 |
| United Kingdom | 52,198 |
| Belgium | 6,340 |
| Singapore | 1,298 |
| Germany | 776 |
| Japan | 704 |
Client strings it sends
| User agent | Probes |
|---|---|
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 146,352 |
| Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 3,418 |
| python-requests/2.34.2 | 1,412 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | 689 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 524 |
ASN report
ASN report
Loading live data…