AS135377 — UCLOUD-HK-AS-AP UCLOUD INFORMATION
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 47 minutes ago · first observed 2026-09-25 (29 days ago)
22,405
Attacks
701
Distinct source IPs
18
KEV exploit hits
Attacks from this network most often target T1595 Active Scanning.
OffSeq honeypot sensors recorded 22,405 attacks from 701 distinct hosts within AS135377in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1595 Active Scanning6,570
- T1110 Brute Force5,888
- T1190 Exploit Public-Facing Application4,236
- T1595.002 Vulnerability Scanning2,170
- T1552 Unsecured Credentials1,746
- T1046 Network Service Discovery754
- T1071.003 Mail Protocols136
- T1059 Command and Scripting Interpreter106
- T1078 Valid Accounts76
- T1498.002 Reflection Amplification71
- T1210 Exploitation of Remote Services51
- T1040 Network Sniffing41
Top countries
- United States5,953
- Germany4,812
- Hong Kong4,180
- Vietnam989
- Thailand985
- South Korea888
- Singapore795
- Nigeria740
- Japan693
- Australia675
- United Kingdom611
- India234