AS4837 — CHINA169-BACKBONE CHINA UNICOM China169
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 23 minutes ago · first observed 2026-09-25 (29 days ago)
61,245
Attacks
782
Distinct source IPs
5
KEV exploit hits
Attacks from this network most often target T1110 Brute Force.
OffSeq honeypot sensors recorded 61,245 attacks from 782 distinct hosts within AS4837in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force55,597
- T1190 Exploit Public-Facing Application1,478
- T1021.005 VNC1,438
- T1046 Network Service Discovery485
- T1595 Active Scanning403
- T1059 Command and Scripting Interpreter393
- T1595.002 Vulnerability Scanning140
- T1078 Valid Accounts11
- T1498.002 Reflection Amplification7
- T0846 Remote System Discovery6
- T1105 Ingress Tool Transfer2
- T1552 Unsecured Credentials1
Top countries
- China61,245