← Back to feed
Location
🇯🇵 JP / Tokyo
ASN
AS135377 · UCLOUD INFORMATION TECHNOLOGY HK LIMITED
Cloud Provider
—
Total Events
4
Below average by volume
Agent Count
3
First / Last Seen
2026-05-14 06:53 — 2026-07-24 06:10
Attack Types
MITRE ATT&CK Techniques
External Corroboration
CINS Army
cins:bad_reputation
DShield Top Attackers
dshield:top_attacker
Campaigns
Multi-Agent Scan
SCAN
Active
medium
51 IPs
181700 events
2026-07-17 — ongoing · 51 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
30 IPs
52890 events
2026-07-01 — ongoing · 30 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
13 IPs
19247 events
2026-07-01 — ongoing · 13 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
57 IPs
188112 events
2026-05-14 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
26 IPs
62471 events
2026-05-03 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
17 IPs
17962 events
2026-04-06 — ongoing · 17 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
53 IPs
183601 events
2026-03-27 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
34 IPs
133562 events
2026-03-24 — ongoing · 34 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
43 IPs
154759 events
2026-03-02 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
43 IPs
116455 events
2026-02-24 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
ASN
Active
medium
🇭🇰 HK
39 IPs
16735 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforce
2026-02-18 — ongoing · 39 IPs from the same network (UCLOUD INFORMATION TECHNOLOGY HK LIMITED, AS135377) were active during overlapping time periods. …
Session Forensics
Sessions
4
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
0e92e0f794319a3e
25%
Loading events...
Web Probe
b5e8198547d862de
25%
Loading events...
Web Probe
fc61cc242e3ba18b
25%
Loading events...
Web Probe
ae3cbe9388f4a658
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-07-24 06:10:24 | :80 | http | HTTP GET request | opencanary | sea |
| 2026-07-22 22:37:12 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-06-22 02:19:57 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-05-14 06:53:33 | :80 | http | HTTP GET request | opencanary | sin |