AS9808: China Mobile Communications Group Co., Ltd.
HoneyLabs honeypots recorded 749 probes from AS9808 (China Mobile Communications Group Co., Ltd.) in the last 7 days, originating from 81 distinct source IP addresses.
First observed 2026-08-08 20:22:55, most recently 2026-08-15 14:38:52 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 1433 | 86 |
| 445 | 51 |
| 5555 | 7 |
| 4080 | 6 |
| 8858 | 6 |
| 6379 | 6 |
| 8080 | 5 |
| 2086 | 5 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 111.7.96.165 | 41 | China | |
| 111.7.96.153 | 39 | China | |
| 111.7.96.171 | 34 | China | |
| 111.7.96.181 | 33 | China | |
| 111.7.96.176 | 30 | China | |
| 111.7.96.157 | 29 | China | |
| 111.7.96.172 | 28 | China | |
| 111.7.96.173 | 27 | China |
Where it comes from
| Country | Probes |
|---|---|
| China | 749 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 494 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 | 36 |
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | 21 |
| Python WinRM client | 3 |
| curl/7.74.0 | 2 |
ASN report
ASN report
Loading live data…