AS45102 — ALIBABA-CN-NET Alibaba US Technology Co.
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 6 minutes ago · first observed 2026-09-25 (29 days ago)
168,656
Attacks
1,657
Distinct source IPs
15
KEV exploit hits
Attacks from this network most often target T1021.005 VNC.
OffSeq honeypot sensors recorded 168,656 attacks from 1,657 distinct hosts within AS45102in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1021.005 VNC113,499
- T1190 Exploit Public-Facing Application6,089
- T1110 Brute Force5,287
- T1595 Active Scanning3,633
- T1046 Network Service Discovery1,453
- T1595.002 Vulnerability Scanning947
- T1498.002 Reflection Amplification254
- T1210 Exploitation of Remote Services85
- T0846 Remote System Discovery60
- T1078 Valid Accounts40
- T1059 Command and Scripting Interpreter36
- T1187 Forced Authentication22
Top countries
- Singapore133,670
- Hong Kong11,315
- Japan8,336
- Germany6,092
- United States5,863
- South Korea2,088
- Malaysia1,058
- United Kingdom111
- United Arab Emirates76
- Indonesia17
- Saudi Arabia16
- Thailand7