AS208172: Proton AG

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 2026-10-23 16:22 UTC · first observed 2026-09-26

Attacks from this network most often target T1552 Unsecured Credentials.

OffSeq honeypot sensors recorded 999 attacks from 23 distinct hosts within AS208172 in the last 30 days. Source addresses are aggregated to /16 networks; Mirage never publishes an individual attacker IP.