AS205759 — GHOSTYNETWORKS
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 1 day ago · first observed 2026-09-25 (29 days ago)
11,997
Attacks
50
Distinct source IPs
Attacks from this network most often target T1110 Brute Force.
OffSeq honeypot sensors recorded 11,997 attacks from 50 distinct hosts within AS205759in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force9,266
- T1021.005 VNC673
- T1071.003 Mail Protocols300
- T1190 Exploit Public-Facing Application230
- T1595.002 Vulnerability Scanning168
- T1046 Network Service Discovery125
- T1595 Active Scanning114
- T1059 Command and Scripting Interpreter14
- T1090 Proxy8
- T1210 Exploitation of Remote Services4
- T1552.001 Credentials In Files1
- T1105 Ingress Tool Transfer1
Top countries
- Seychelles9,260
- Philippines953
- Singapore662
- The Netherlands289