AS398324 — CENSYS-ARIN-01
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 6 minutes ago · first observed 2026-09-25 (29 days ago)
30,636
Attacks
586
Distinct source IPs
3
KEV exploit hits
Attacks from this network most often target T1190 Exploit Public-Facing Application.
OffSeq honeypot sensors recorded 30,636 attacks from 586 distinct hosts within AS398324in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1190 Exploit Public-Facing Application12,983
- T1110 Brute Force8,899
- T1595 Active Scanning3,334
- T1046 Network Service Discovery2,012
- T1595.002 Vulnerability Scanning1,500
- T1498.002 Reflection Amplification563
- T0846 Remote System Discovery524
- T1105 Ingress Tool Transfer181
- T1187 Forced Authentication167
- T1040 Network Sniffing149
- T1210 Exploitation of Remote Services87
- T1021.005 VNC83
Top countries
- United States30,636