AS202425: IP Volume inc
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 2026-10-25 17:38 UTC · first observed 2026-09-25
5,979
Attacks
35
Distinct source IPs
1
KEV exploit hits
Attacks from this network most often target T1190 Exploit Public-Facing Application.
OffSeq honeypot sensors recorded 5,979 attacks from 35 distinct hosts within AS202425 in the last 30 days. Source addresses are aggregated to /16 networks; Mirage never publishes an individual attacker IP.
Techniques
- T1190 Exploit Public-Facing Application3,459
- T1110 Brute Force1,010
- T1595.002 Vulnerability Scanning283
- T1046 Network Service Discovery260
- T1595 Active Scanning154
- T1021.005 VNC114
- T1498.002 Reflection Amplification66
- T0846 Remote System Discovery65
- T1210 Exploitation of Remote Services53
- T1078 Valid Accounts21
- T1187 Forced Authentication10
- T1040 Network Sniffing9
Top countries
- The Netherlands5,979