AS12389 — ROSTELECOM-AS PJSC Rostelecom. Technical Team

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 3 hours ago · first observed 2026-08-18 (27 days ago)

671

Attacks

106

Distinct source IPs

Attacks from this network most often target T1595 Active Scanning.

OffSeq honeypot sensors recorded 671 attacks from 106 distinct hosts within AS12389in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1595 Active Scanning367
T1210 Exploitation of Remote Services91
T1110 Brute Force38
T1190 Exploit Public-Facing Application37
T1059 Command and Scripting Interpreter26
T1552 Unsecured Credentials25
T1021.005 VNC3
T1105 Ingress Tool Transfer2
T1552.001 Credentials In Files1

Top countries

Russia671

Open the live view →