AS21859 — ZEN-ECN
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 23 minutes ago · first observed 2026-09-25 (29 days ago)
65,315
Attacks
301
Distinct source IPs
Attacks from this network most often target T1110 Brute Force.
OffSeq honeypot sensors recorded 65,315 attacks from 301 distinct hosts within AS21859in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force28,343
- T1657 Financial Theft27,878
- T1190 Exploit Public-Facing Application5,668
- T1595 Active Scanning1,753
- T1046 Network Service Discovery641
- T1595.002 Vulnerability Scanning251
- T1552 Unsecured Credentials171
- T0846 Remote System Discovery149
- T1592 Gather Victim Host Information96
- T1210 Exploitation of Remote Services30
- T1498.002 Reflection Amplification28
- T1105 Ingress Tool Transfer19
Top countries
- Argentina53,360
- United States7,607
- Portugal4,055
- Singapore187
- Germany31
- The Netherlands30
- Taiwan21
- Japan10
- Spain10
- Hong Kong4