AS21859 — ZEN-ECN
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 3 hours ago · first observed 2026-08-17 (29 days ago)
5,624
Attacks
195
Distinct source IPs
Attacks from this network most often target T1110 Brute Force.
OffSeq honeypot sensors recorded 5,624 attacks from 195 distinct hosts within AS21859in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force1,783
- T1190 Exploit Public-Facing Application1,464
- T1595 Active Scanning1,433
- T1046 Network Service Discovery468
- T1595.002 Vulnerability Scanning185
- T0846 T0846141
- T1021.005 VNC39
- T1498.002 Reflection Amplification30
- T1105 Ingress Tool Transfer16
- T1210 Exploitation of Remote Services16
- T1505.003 Web Shell14
- T1657 Financial Theft14
Top countries
- Portugal4,228
- Taiwan1,289
- United States78
- United Kingdom14
- Japan10
- Germany4
- Thailand1