AS27176 — DATAWAGON

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 14 hours ago · first observed 2026-08-20 (26 days ago)

1,625

Attacks

Distinct source IPs

KEV exploit hits

Attacks from this network most often target T1595 Active Scanning.

OffSeq honeypot sensors recorded 1,625 attacks from 10 distinct hosts within AS27176in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1595 Active Scanning1,353
T1552 Unsecured Credentials102
T1110 Brute Force90
T1592 Gather Victim Host Information50
T1190 Exploit Public-Facing Application20
T1071.003 Mail Protocols5
T1595.002 Vulnerability Scanning3
T1046 Network Service Discovery2

Top countries

United Kingdom1,002
United States623

Open the live view →