← Back to feed
Location
🇭🇰 HK / Hong Kong
ASN
AS135377 · UCLOUD INFORMATION TECHNOLOGY HK LIMITED
Cloud Provider
—
Total Events
27
Average by volume
Agent Count
3
First / Last Seen
2026-04-14 11:17 — 2026-07-17 06:41
Attack Types
MITRE ATT&CK Techniques
External Corroboration
CINS Army
cins:bad_reputation
DShield Top Attackers
dshield:top_attacker
Campaigns
Multi-Agent Scan
SCAN
Active
medium
37 IPs
68766 events
2026-06-20 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
48 IPs
98285 events
2026-05-07 — ongoing · 48 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
17 IPs
93693 events
2026-05-02 — ongoing · 17 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
24 IPs
62504 events
2026-05-02 — ongoing · 24 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
28 IPs
40887 events
2026-05-02 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
16 IPs
29417 events
2026-05-02 — ongoing · 16 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
21 IPs
100002 events
2026-05-01 — ongoing · 21 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
30 IPs
61273 events
2026-04-09 — ongoing · 30 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
27 IPs
66874 events
2026-03-30 — ongoing · 27 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
64 IPs
112630 events
2026-03-07 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
18 IPs
20747 events
2026-03-02 — ongoing · 18 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
35 IPs
72830 events
2026-03-02 — ongoing · 35 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
48 IPs
104467 events
2026-02-28 — ongoing · 48 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
51 IPs
131612 events
2026-02-26 — ongoing · 51 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
13 IPs
14137 events
2026-02-25 — ongoing · 13 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
57 IPs
148333 events
2026-02-24 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
134079 events
2026-02-24 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
60 IPs
156157 events
2026-02-24 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
ASN
Active
medium
🇭🇰 HK
35 IPs
17025 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforce
2026-02-18 — ongoing · 35 IPs from the same network (UCLOUD INFORMATION TECHNOLOGY HK LIMITED, AS135377) were active during overlapping time periods. …
Session Forensics
Sessions
11
Avg Depth Score
0.16
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
SSH Client
Evidence Timeline
Scanner
f580f4b9e01a
15%
Loading events...
SSH-1.5-Server
Scanner
b00de4c82bba
15%
Loading events...
Scanner
39c62d9575e6
15%
Loading events...
\xfc\xf8\xbf8\x85Ʒ\xfd\xd7i> \xf…
Scanner
bcb55e6a4ba1
15%
Loading events...
SSH-1.5-Server
Scanner
3d0cb292c8d1
15%
Loading events...
Scanner
9916143ee765
15%
Loading events...
\xfc\xf8\xe4\xbbthJ?}\xe2\x9e\x…
MySQL Probe
36596056841e803d
1
20%
Loading events...
MySQL Probe
e42c33ddf3d10856
1
20%
Loading events...
MySQL Probe
15863791e0e82eae
1
20%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-05-26 14:25:57 | :3306 | mysql | MySQL connection | opencanary | sin |
| 2026-05-16 17:48:24 | :3306 | mysql | MySQL connection | opencanary | sea |