AS63199: CDS Global Cloud Co., Ltd
HoneyLabs honeypots recorded 3,261 probes from AS63199 (CDS Global Cloud Co., Ltd) in the last 7 days, originating from 19 distinct source IP addresses.
First observed 2026-11-07 22:59, most recently 2026-11-14 22:35 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-10, with 740. Its 19 addresses probed 317 distinct ports. No port took more than 1% of the probes. No single address sent more than 18% of them. None of the 19 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 4046 | 48 |
| 8080 | 38 |
| 10003 | 36 |
| 7860 | 36 |
| 8101 | 32 |
| 30443 | 30 |
| 19200 | 30 |
| 8686 | 30 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 148.153.56.170 | 600 | United States | |
| 148.153.189.62 | 587 | United States | |
| 148.153.56.174 | 560 | United States | |
| 148.153.188.246 | 538 | United States | |
| 148.153.188.254 | 530 | United States | |
| 148.153.56.83 | 52 | United States | |
| 148.153.56.62 | 52 | United States | |
| 164.52.24.181 | 48 | Japan |
Where it comes from
| Country | Probes |
|---|---|
| United States | 2,979 |
| Japan | 282 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.36 | 2,250 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 | 282 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0 | 164 |
ASN report
ASN report
Loading