AS12876 — Online SAS

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 3 hours ago · first observed 2026-08-03 (29 days ago)

997

Attacks

Distinct source IPs

Attacks from this network most often target T1657 Financial Theft.

OffSeq honeypot sensors recorded 997 attacks from 48 distinct hosts within AS12876in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1657 Financial Theft418
T1046 Network Service Discovery142
T1110 Brute Force124
T1190 Exploit Public-Facing Application121
T1595.002 Vulnerability Scanning98
T1595 Active Scanning91

Top countries

France975
Poland11
Türkiye9
The Netherlands2

Open the live view →