Attack traffic from Hong Kong

Honeypot telemetry for sources geolocated to Hong Kong

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

23,263

Attacks

293

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 23,263 attacks from 293 distinct hosts geolocated to Hong Kongin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force8,783
T1021.005 VNC6,775
T1657 Financial Theft3,367
T1190 Exploit Public-Facing Application698
T1595 Active Scanning577
T1595.002 Vulnerability Scanning144
T1046 Network Service Discovery128
T1210 Exploitation of Remote Services29

Services attacked

VNC9,077
SIP4,933
SMTP3,891
SMB2,268
RDP1,044
HTTP550
HTTPS203

Top networks (ASNs)

CTGSERVERLIMITED-AS-AP CTG Server Limited3,738
ALIBABA-CN-NET Alibaba US Technology Co., Ltd.3,426
RELIABLESITE2,385
UNICOM-GLOBAL China Unicom Global1,645
TELE-AS Tele Asia Limited1,584
TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 1,238
HKBN-AS-AP HK Broadband Network Ltd.772
UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK682

Sample request paths

/ /favicon.ico /remote/login /login /vpn/index.html

Open the live view →