AS24940 — HETZNER-AS
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 2 minutes ago · first observed 2026-09-25 (29 days ago)
330,830
Attacks
195
Distinct source IPs
930
KEV exploit hits
Attacks from this network most often target CVE-2017-0144.
OffSeq honeypot sensors recorded 330,830 attacks from 195 distinct hosts within AS24940in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
Techniques
- T1110 Brute Force240,210
- T1021.005 VNC32,738
- T1210 Exploitation of Remote Services15,457
- T1595 Active Scanning11,343
- T1190 Exploit Public-Facing Application1,076
- T1187 Forced Authentication918
- T1595.002 Vulnerability Scanning801
- T1552 Unsecured Credentials626
- T1657 Financial Theft65
- T1059 Command and Scripting Interpreter44
- T1046 Network Service Discovery27
- T1498.002 Reflection Amplification9
Top countries
- Germany207,022
- United Arab Emirates111,130
- Finland11,878
- United Kingdom528
- The Netherlands272