← Back to feed

AS142002 Scloud Pte Ltd

ASN Active medium
Why this campaign was detected
5 IPs from the same network (Scloud Pte Ltd, AS142002) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS142002 · Scloud Pte Ltd
Subnet
Country
πŸ‡ΈπŸ‡¬ SG
Cloud Provider
Member Count
5 IPs
Below average
Total Events
2839
Below average by volume
Started / Ended
2026-02-27 14:46 — ongoing
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
165.154.236.104 credential_harvester 71% DROP1x OSINT 1520 3 ssh:bruteforce β€” 2026-07-09 21:07 evidence →
165.154.254.143 credential_harvester 65% DROP1x OSINT 901 2 ssh:bruteforce β€” 2026-07-15 22:12 evidence →
165.154.241.28 malware_dropper 43% DROP1x OSINT 23 1 ssh:bruteforce β€” 2026-07-12 07:36 evidence →
165.154.200.185 credential_harvester 41% DROP 384 1 ssh:bruteforce β€” 2026-07-09 15:59 evidence →
165.154.206.223 web_probe 33% DROP2x OSINT 11 2 http:scan β€” 2026-07-09 22:03 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds