AS212238 — CDNEXT
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 8 minutes ago · first observed 2026-09-25 (29 days ago)
686,124
Attacks
1,556
Distinct source IPs
9
KEV exploit hits
Attacks from this network most often target T1595 Active Scanning.
OffSeq honeypot sensors recorded 686,124 attacks from 1,556 distinct hosts within AS212238in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1595 Active Scanning221,657
- T1190 Exploit Public-Facing Application195,726
- T1110 Brute Force177,446
- T1021.005 VNC7,507
- T1657 Financial Theft1,095
- T1552 Unsecured Credentials279
- T1078 Valid Accounts52
- T1592 Gather Victim Host Information42
- T1595.002 Vulnerability Scanning35
- T1505.003 Web Shell16
- T1187 Forced Authentication15
- T1552.001 Credentials In Files13
Top countries
- United States342,901
- Brazil221,620
- Iran63,557
- Switzerland21,727
- Poland15,283
- Denmark6,785
- Spain5,223
- United Kingdom4,987
- The Netherlands2,094
- Singapore1,046
- Germany390
- France138