AS4808: China Unicom Beijing Province Network
HoneyLabs honeypots recorded 861 probes from AS4808 (China Unicom Beijing Province Network) in the last 7 days, originating from 48 distinct source IP addresses.
First observed 2026-11-07 21:17, most recently 2026-11-14 19:59 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-14, with 301. Its 48 addresses probed 187 distinct ports. No port took more than 5% of the probes. No single address sent more than 8% of them. None of the 25 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 443 | 45 |
| 5432 | 24 |
| 54321 | 22 |
| 22 | 20 |
| 2181 | 12 |
| 1433 | 12 |
| 5006 | 11 |
| 6379 | 11 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 106.75.11.101 | 67 | China | |
| 106.75.16.170 | 61 | China | |
| 106.75.9.9 | 57 | China | |
| 106.75.24.130 | 48 | China | |
| 106.75.5.165 | 42 | China | |
| 106.75.8.214 | 35 | China | |
| 106.75.13.75 | 35 | China | |
| 106.75.21.80 | 33 | China |
Where it comes from
| Country | Probes |
|---|---|
| China | 861 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | 382 |
| rawgrab | 15 |
| NTRIP GNSSInternetRadio | 3 |
| Python/3.13 aiohttp/3.13.5 | 2 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 | 2 |
ASN report
ASN report
Loading