AS197170 — CONTABO

Attacker network profile

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

22,627

Attacks

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 22,627 attacks from 62 distinct hosts within AS197170in the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force20,183
T1190 Exploit Public-Facing Application633
T1595 Active Scanning294
T1059 Command and Scripting Interpreter223
T1595.002 Vulnerability Scanning168
T1552 Unsecured Credentials128
T1592 Gather Victim Host Information42
T1498.002 Reflection Amplification14

Services attacked

SIP19,499
SSH1,396
HTTP691
MongoDB505
PostgreSQL421
HTTPS74
NTP14

Top countries

Bulgaria20,580
The Netherlands1,068
Germany579
United Kingdom387
United States13

Sample request paths

/login / /.env /config.php /configuration.php

Open the live view →