AS58461: CT-HangZhou-IDC
HoneyLabs honeypots recorded 2,596 probes from AS58461 (CT-HangZhou-IDC) in the last 7 days, originating from 12 distinct source IP addresses.
First observed 2026-08-08 04:57:35, most recently 2026-08-15 03:28:14 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 1433 | 1,877 |
| 80 | 60 |
| 50999 | 28 |
| 4000 | 21 |
| 9090 | 20 |
| 8091 | 20 |
| 8096 | 20 |
| 631 | 20 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 123.99.201.94 | 1,866 | China | |
| 115.231.78.11 | 641 | China | |
| 183.134.40.82 | 51 | China | |
| 60.191.137.103 | 8 | China | |
| 183.134.40.84 | 7 | China | |
| 183.134.90.212 | 7 | China | |
| 125.124.106.70 | 6 | China | |
| 183.134.217.11 | 3 | China |
Where it comes from
| Country | Probes |
|---|---|
| China | 2,596 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE | 396 |
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.2623.112 Safari/537.36 | 132 |
| Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K) | 23 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27 | 14 |
| Docker-Client/20.10.21 (linux) | 4 |
ASN report
ASN report
Loading live data…