AS207957 — SERVHOST-AS

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 26 minutes ago · first observed 2026-09-25 (29 days ago)

30,097

Attacks

Distinct source IPs

Attacks from this network most often target T1110 Brute Force.

OffSeq honeypot sensors recorded 30,097 attacks from 16 distinct hosts within AS207957in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force21,730
T1021.005 VNC4,715
T1190 Exploit Public-Facing Application78
T1595 Active Scanning74
T1046 Network Service Discovery1

Top countries

United States19,512
United Kingdom9,888
Germany697

Open the live view → Get this in real time →