AS202422 — GHOST

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 14 hours ago · first observed 2026-09-25 (29 days ago)

Attacks from this network most often target T1021.005 VNC.

OffSeq honeypot sensors recorded 5,016 attacks from 5 distinct hosts within AS202422in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.