Attack traffic from Japan

Honeypot telemetry for sources geolocated to Japan

Observed by OffSeq honeypot sensors · last 7 days · last seen just now · first observed 2026-10-15 (7 days ago)

19,611

Attacks

369

Distinct source IPs

Attack traffic is led by TENCENT-NET-AP-CN Tencent Building, Kejizhongyi .

OffSeq honeypot sensors recorded 19,611 attacks from 369 distinct hosts geolocated to Japanin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force6,207
T1021.005 VNC4,710
T1190 Exploit Public-Facing Application1,722
T1595 Active Scanning1,387
T1552 Unsecured Credentials727
T1059 Command and Scripting Interpreter210
T1595.002 Vulnerability Scanning184
T1046 Network Service Discovery175

Services attacked

VNC10,221
SSH3,837
HTTP2,154
HTTPS1,367
RDP408
MongoDB165
SMTP158

Top networks (ASNs)

TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 4,301
ALIBABA-CN-NET Alibaba US Technology Co., Ltd.2,719
INFINIVAN-AS-AP Infinivan Incorporated2,173
SHOCK-12,116
Google LLC1,666
HOSTROYALE999
ORACLE-BMC-31898571
AKAMAI-LINODE-AP Akamai Connected Cloud351

Sample request paths

/ /remote/logincheck /favicon.ico /.env /vpn/index.html

Open the live view →