← Back to feed
165.154.135.109
Assessment
- Active for 24 days, 2026-09-21 to 2026-10-16.
- Part of a 204-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US / Los Angeles
ASN
AS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Cloud Provider
—
Total Events
4
Below average by volume
Agent Count
2
First / Last Seen
2026-09-21 23:52 — 2026-10-16 23:30
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
188 IPs
478702 events
2026-09-26 — ongoing · 188 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
138 IPs
357164 events
2026-09-26 — ongoing · 138 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
176 IPs
431239 events
2026-09-26 — ongoing · 176 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
154 IPs
344593 events
2026-09-14 — ongoing · 154 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
196 IPs
474111 events
2026-09-14 — ongoing · 196 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
119 IPs
171719 events
2026-06-25 — ongoing · 119 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
75 IPs
82122 events
2026-06-16 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
69 IPs
44050 events
2026-06-16 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
112 IPs
352675 events
2026-06-16 — ongoing · 112 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
139 IPs
374484 events
2026-06-16 — ongoing · 139 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
272387 events
2026-06-16 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
184 IPs
467385 events
2026-05-07 — ongoing · 184 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
152 IPs
393708 events
2026-04-30 — ongoing · 152 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
171 IPs
411441 events
2026-04-15 — ongoing · 171 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
172 IPs
410700 events
2026-04-10 — ongoing · 172 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
64 IPs
55194 events
2026-04-10 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
106 IPs
365235 events
2026-04-10 — ongoing · 106 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
173 IPs
426866 events
2026-04-10 — ongoing · 173 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
204 IPs
554476 events
2026-03-31 — ongoing · 204 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
195 IPs
533419 events
2026-03-31 — ongoing · 195 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
142 IPs
207914 events
2026-03-31 — ongoing · 142 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
159 IPs
415072 events
2026-03-31 — ongoing · 159 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
163 IPs
413363 events
2026-03-16 — ongoing · 163 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
152 IPs
470569 events
2026-03-15 — ongoing · 152 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
174 IPs
387980 events
2026-03-10 — ongoing · 174 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
106 IPs
185826 events
2026-03-08 — ongoing · 106 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
129 IPs
354674 events
2026-03-04 — ongoing · 129 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
166 IPs
379417 events
2026-03-04 — ongoing · 166 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
159 IPs
365897 events
2026-03-02 — ongoing · 159 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
159 IPs
386387 events
2026-03-01 — ongoing · 159 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
76 IPs
31752 events
2026-02-26 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
ASN
Active
medium
🇭🇰 HK
57 IPs
34650 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:bruteforcetelnet:connectiontelnet:intrusion
2026-02-18 — ongoing · 57 IPs from the same network (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED, AS135377) were active during overlapping time periods. …
Session Forensics
Sessions
4
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
b7e90a2d62a4ab50
25%
Loading events...
Web Probe
0fc3db6e520fa75e
25%
Loading events...
Web Probe
c653e7c26c3a675f
25%
Loading events...
Web Probe
ceffa3b534138d3f
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-10-16 23:30:26 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-10-02 15:34:57 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-09-25 19:19:34 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-09-21 23:52:19 | :80 | http | HTTP GET request | opencanary | ewr |