AS12876 — Online SAS

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 10 minutes ago · first observed 2026-09-25 (29 days ago)

130,634

Attacks

Distinct source IPs

Attacks from this network most often target T1110 Brute Force.

OffSeq honeypot sensors recorded 130,634 attacks from 91 distinct hosts within AS12876in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force85,340
T1657 Financial Theft44,397
T1190 Exploit Public-Facing Application389
T1046 Network Service Discovery285
T1595.002 Vulnerability Scanning85
T1595 Active Scanning78
T0846 Remote System Discovery4
T1589.002 Email Addresses1

Top countries

The Netherlands115,893
France14,681
Poland44
Türkiye16

Open the live view → Get this in real time →