AS19318 — CONTABO

Attacker network profile

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

322

Attacks

Distinct hosts (/16-masked)

KEV exploit hits

OffSeq honeypot sensors recorded 322 attacks from 13 distinct hosts within AS19318in the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

CVEs targeted

CVE-2017-984122

Techniques

T1110 Brute Force127
T1595 Active Scanning72
T1190 Exploit Public-Facing Application48
T1552 Unsecured Credentials24
T1595.002 Vulnerability Scanning23
T1046 Network Service Discovery22
T1071.003 Mail Protocols3
T1552.001 Credentials In Files1

Services attacked

HTTP162
PostgreSQL85
SMTP21
MongoDB6
Microsoft SQL Server2

Top countries

United States271
Bulgaria34
Türkiye17

Sample request paths

/.env / /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd /phpmyadmin

Open the live view →