← Back to feed

AS142002 Scloud Pte Ltd

ASN Active medium
Why this campaign was detected
5 IPs from the same network (Scloud Pte Ltd, AS142002) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS142002 · Scloud Pte Ltd
Subnet
Country
🇹🇼 TW
Cloud Provider
Member Count
5 IPs
Below average
Total Events
1644
Below average by volume
Started / Ended
2026-02-27 14:46 — ongoing
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
165.154.227.158 credential_harvester 71% DROP1x OSINT 1382 3 ssh:bruteforce 2026-08-21 20:10 evidence →
165.154.200.214 credential_harvester 57% DROP2x OSINT 171 2 ssh:bruteforce 2026-08-22 03:58 evidence →
165.154.241.44 opportunistic_bruter 45% DROP1x OSINT 23 1 ssh:bruteforce 2026-08-27 17:43 evidence →
165.154.225.20 scanner 39% DROP1x OSINT 66 2 ssh:bruteforce 2026-08-29 23:30 evidence →
165.154.202.146 web_probe 29% DROP 4 2 http:scan 2026-08-28 05:21 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}