AS4134: Chinanet
HoneyLabs honeypots recorded 8,100 probes from AS4134 (Chinanet) in the last 7 days, originating from 631 distinct source IP addresses.
First observed 2026-11-07 23:39, most recently 2026-11-14 23:32 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-11, with 3,585. Its 631 addresses probed 1,009 distinct ports. The most probed was port 1433, with 52% of the probes. One address, 182.129.133.17, sent 33% of them. None of the 25 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 1433 | 4,173 |
| 22 | 708 |
| 445 | 579 |
| 1080 | 400 |
| 9050 | 201 |
| 6379 | 21 |
| 5555 | 16 |
| 443 | 9 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 182.129.133.17 | 2,709 | China | |
| 49.68.125.246 | 793 | China | |
| 219.151.7.106 | 599 | China | |
| 122.228.141.226 | 509 | China | |
| 42.248.127.219 | 432 | China | |
| 123.160.223.74 | 372 | China | |
| 123.160.223.75 | 369 | China | |
| 123.160.223.72 | 365 | China |
Where it comes from
| Country | Probes |
|---|---|
| China | 8,100 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 1,452 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36 | 16 |
| Mozilla/5.0 | 8 |
| curl/8.4.0 | 7 |
| Mozilla/5.0 zgrab/0.x | 6 |
ASN report
ASN report
Loading