AS4837: CHINA UNICOM China169 Backbone
HoneyLabs honeypots recorded 3,330 probes from AS4837 (CHINA UNICOM China169 Backbone) in the last 7 days, originating from 1,683 distinct source IP addresses.
First observed 2026-08-08 14:51:14, most recently 2026-08-15 14:39:33 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 1433 | 551 |
| 22 | 231 |
| 3389 | 226 |
| 443 | 74 |
| 5555 | 28 |
| 80 | 27 |
| 9042 | 24 |
| 8030 | 20 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 221.199.42.158 | 422 | China | |
| 110.240.65.119 | 210 | China | |
| 101.206.211.72 | 114 | China | |
| 122.114.11.160 | 97 | China | |
| 222.134.147.66 | 56 | China | |
| 123.138.18.10 | 20 | China | |
| 60.220.161.192 | 12 | China | |
| 211.91.60.86 | 12 | China |
Where it comes from
| Country | Probes |
|---|---|
| China | 3,330 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | 1,141 |
| libredtail-http | 56 |
| Mozilla/5.0 zgrab/0.x | 16 |
| Python WinRM client | 11 |
| Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1 | 6 |
ASN report
ASN report
Loading live data…