AS12389 — CONTABO

Attacker network profile

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

444

Attacks

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 444 attacks from 22 distinct hosts within AS12389in the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1595 Active Scanning351
T1059 Command and Scripting Interpreter23
T1552 Unsecured Credentials18
T1210 Exploitation of Remote Services15
T1110 Brute Force14
T1021.005 VNC3
T1105 Ingress Tool Transfer2

Services attacked

HTTP369
Telnet49
SMB15
VNC8
Microsoft SQL Server2
SSH1

Top countries

Russia444

Sample request paths

/.git/HEAD /.git/index /.git/info/refs /.git/logs/refs/heads/development /.git/hooks/post-receive.sample

Open the live view →