AS137280: Kingsoft cloud corporation limited
HoneyLabs honeypots recorded 50 probes from AS137280 (Kingsoft cloud corporation limited) in the last 7 days, originating from 4 distinct source IP addresses.
First observed 2026-11-01 18:28, most recently 2026-11-07 18:25 (UTC).
What the sensors show
Probes arrived on 3 of the 7 days in this window. The busiest day was 2026-11-01, with 24. Its 4 addresses probed 11 distinct ports. The most probed was port 139, with 20% of the probes. One address, 104.250.53.191, sent 34% of them.
Ports it targets
| Port | Probes |
|---|---|
| 139 | 10 |
| 7 | 8 |
| 5901 | 8 |
| 1026 | 6 |
| 22 | 4 |
| 11 | 3 |
| 5903 | 3 |
| 32768 | 3 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 104.250.53.191 | 17 | Singapore | |
| 104.250.52.152 | 14 | Singapore | |
| 104.250.53.219 | 13 | Singapore | |
| 104.250.52.93 | 6 | Singapore |
Where it comes from
| Country | Probes |
|---|---|
| Singapore | 50 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36 | 12 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 | 12 |
ASN report
ASN report
Loading