Attack traffic from Singapore
Honeypot telemetry for sources geolocated to Singapore
Observed by OffSeq honeypot sensors · last 30 days · last seen 6 minutes ago · first observed 2026-09-25 (29 days ago)
409,595
Attacks
1,148
Distinct source IPs
289
KEV exploit hits
Attack traffic is led by ALIBABA-CN-NET Alibaba US Technology Co., most often targeting CVE-2024-4577.
OffSeq honeypot sensors recorded 409,595 attacks from 1,148 distinct hosts geolocated to Singaporein the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
- CVE-2024-4577132
- CVE-2021-26855130
Techniques
- T1021.005 VNC158,522
- T1110 Brute Force94,331
- T1059 Command and Scripting Interpreter17,974
- T1190 Exploit Public-Facing Application12,956
- T1657 Financial Theft12,134
- T1595 Active Scanning10,632
- T1552 Unsecured Credentials1,954
- T1595.002 Vulnerability Scanning1,600
- T1046 Network Service Discovery731
- T1552.001 Credentials In Files379
- T1592 Gather Victim Host Information186
- T1078 Valid Accounts41
Top networks (ASNs)
- ALIBABA-CN-NET Alibaba US Technology Co.133,670
- DIGITALOCEAN-ASN114,809
- TENCENT-NET-AP-CN Tencent Building69,626
- AS-26496-GO-DADDY-COM-LLC26,077
- OVH23,730
- ALIBABA-CN-NET Hangzhou Alibaba13,639
- ORACLE-BMC-318986,187
- GOOGLE-CLOUD-PLATFORM2,865
- M2472,844
- AKAMAI-LINODE-AP Akamai Connected Cloud1,806
- CAPL-AS-AP Contabo Asia Private Limited1,794