MIRAGE
Threat IntelligenceASNs › AS396507

AS396507 — EMERALD-ONION

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 15 hours ago · first observed 2026-08-23 (22 days ago)

253
Attacks
31
Distinct source IPs

Attacks from this network most often target T1190 Exploit Public-Facing Application.

OffSeq honeypot sensors recorded 253 attacks from 31 distinct hosts within AS396507in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Open the live view →