AS396982 — GOOGLE-CLOUD-PLATFORM
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 11 minutes ago · first observed 2026-09-25 (29 days ago)
157,147
Attacks
4,814
Distinct source IPs
127
KEV exploit hits
Attacks from this network most often target CVE-2024-4577.
OffSeq honeypot sensors recorded 157,147 attacks from 4,814 distinct hosts within AS396982in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
Techniques
- T1110 Brute Force45,279
- T1595 Active Scanning41,098
- T1190 Exploit Public-Facing Application34,136
- T1552 Unsecured Credentials23,594
- T1595.002 Vulnerability Scanning4,129
- T1046 Network Service Discovery2,912
- T1498.002 Reflection Amplification1,492
- T1505.003 Web Shell636
- T1210 Exploitation of Remote Services450
- T1592 Gather Victim Host Information442
- T0846 Remote System Discovery427
- T1187 Forced Authentication266
Top countries
- United States79,416
- Belgium38,755
- The Netherlands11,116
- Germany9,347
- Canada4,162
- Japan3,268
- Singapore2,865
- Taiwan2,794
- United Kingdom2,192
- Brazil1,270
- India782
- South Korea305