AS12989 — CONTABO

Attacker network profile

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

Attacks

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 95 attacks from 5 distinct hosts within AS12989in the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1190 Exploit Public-Facing Application40
T1110 Brute Force39
T1595.002 Vulnerability Scanning4
T1595 Active Scanning4
T1046 Network Service Discovery4
T1498.002 Reflection Amplification2

Services attacked

HTTP29
RDP19
IMAP15
MongoDB8
Memcached4
HTTPS4
rsync3

Top countries

United Kingdom95

Sample request paths

/ /favicon.ico /aad7 /robots.txt /.well-known/security.txt

Open the live view →