AS206092 — SECFIREWALLAS
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 2 hours ago · first observed 2026-09-25 (29 days ago)
4,503
Attacks
351
Distinct source IPs
1
KEV exploit hits
Attacks from this network most often target T1595 Active Scanning.
OffSeq honeypot sensors recorded 4,503 attacks from 351 distinct hosts within AS206092in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1595 Active Scanning2,086
- T1190 Exploit Public-Facing Application1,770
- T1110 Brute Force320
- T1552 Unsecured Credentials254
- T1592 Gather Victim Host Information21
- T1505.003 Web Shell14
- T1552.001 Credentials In Files6
- T1505 Server Software Component5
- T1595.002 Vulnerability Scanning3
- T0846 Remote System Discovery2
Top countries
- United States1,623
- Czechia1,288
- Sweden1,198
- United Kingdom322
- France29
- Switzerland16
- Belgium16
- Japan4
- Denmark3
- Germany3
- Italy1