AS132203 — TENCENT-NET-AP-CN Tencent Building
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 7 minutes ago · first observed 2026-09-25 (29 days ago)
147,682
Attacks
650
Distinct source IPs
11
KEV exploit hits
Attacks from this network most often target T1021.005 VNC.
OffSeq honeypot sensors recorded 147,682 attacks from 650 distinct hosts within AS132203in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1021.005 VNC69,345
- T1110 Brute Force33,550
- T1190 Exploit Public-Facing Application5,839
- T1595 Active Scanning1,937
- T1595.002 Vulnerability Scanning131
- T1046 Network Service Discovery109
- T1210 Exploitation of Remote Services17
- T1552.001 Credentials In Files15
- T1059 Command and Scripting Interpreter10
Top countries
- Singapore69,626
- South Korea26,748
- United States17,359
- Hong Kong16,256
- Japan7,160
- Germany4,291
- Brazil3,770
- Indonesia2,443
- Thailand21
- China8