AS396982 — CONTABO

Attacker network profile

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

20,664

Attacks

1,127

Distinct hosts (/16-masked)

KEV exploit hits

OffSeq honeypot sensors recorded 20,664 attacks from 1,127 distinct hosts within AS396982in the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

CVEs targeted

CVE-2017-98411
CVE-2018-200621

Techniques

T1595 Active Scanning8,596
T1190 Exploit Public-Facing Application6,597
T1110 Brute Force2,708
T1552 Unsecured Credentials997
T1595.002 Vulnerability Scanning505
T1046 Network Service Discovery466
T1498.002 Reflection Amplification156
T1505.003 Web Shell86

Services attacked

HTTP12,434
HTTPS2,435
RDP564
MySQL491
IMAP451
MongoDB435
SMTP365

Top countries

United States12,609
Belgium2,061
Brazil797
The Netherlands778
Spain766
Italy744
Germany744
Switzerland739

Sample request paths

/ /vpn/index.html /fetch /login /proxy

Open the live view →