AS56971: Cgi Global Limited
HoneyLabs honeypots recorded 5 probes from AS56971 (Cgi Global Limited) in the last 7 days, originating from 3 distinct source IP addresses.
First observed 2026-10-29 19:16, most recently 2026-11-03 18:49 (UTC).
What the sensors show
Probes arrived on 3 of the 7 days in this window. The busiest day was 2026-11-03, with 3. Its 3 addresses probed 2 distinct ports. The most probed was port 80, with 60% of the probes. One address, 31.59.41.197, sent 60% of them.
Ports it targets
| Port | Probes |
|---|---|
| 80 | 3 |
| 22 | 2 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 31.59.41.197 | 3 | Latvia | |
| 217.60.62.197 | 1 | Latvia | |
| 217.60.248.173 | 1 | Hong Kong |
Where it comes from
| Country | Probes |
|---|---|
| Latvia | 4 |
| Hong Kong | 1 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 | 1 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 Edg/148.0.0.0 | 1 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 | 1 |
ASN report
ASN report
Loading