AS211298 — DRIFTNET
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 3 minutes ago · first observed 2026-09-25 (29 days ago)
29,530
Attacks
841
Distinct source IPs
Attacks from this network most often target T1046 Network Service Discovery.
OffSeq honeypot sensors recorded 29,530 attacks from 841 distinct hosts within AS211298in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1046 Network Service Discovery11,400
- T1595 Active Scanning7,769
- T1110 Brute Force6,245
- T1190 Exploit Public-Facing Application3,081
- T0846 Remote System Discovery355
- T1498.002 Reflection Amplification232
- T1595.002 Vulnerability Scanning131
- T1105 Ingress Tool Transfer54
- T1210 Exploitation of Remote Services54
- T1187 Forced Authentication47
- T1021.005 VNC18
Top countries
- Türkiye9,968
- United Kingdom9,851
- Germany9,711