AS399486 — GOLD IP L.L.C-FZ
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 2 hours ago · first observed 2026-09-25 (29 days ago)
9,374
Attacks
38
Distinct source IPs
3
KEV exploit hits
Attacks from this network most often target T1595 Active Scanning.
OffSeq honeypot sensors recorded 9,374 attacks from 38 distinct hosts within AS399486in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1595 Active Scanning5,880
- T1552 Unsecured Credentials1,487
- T1190 Exploit Public-Facing Application1,042
- T1110 Brute Force409
- T1592 Gather Victim Host Information396
- T1552.001 Credentials In Files46
- T1595.002 Vulnerability Scanning30
- T1078 Valid Accounts14
- T1657 Financial Theft9
- T1071.003 Mail Protocols1
Top countries
- France8,253
- Iran873
- United States229
- United Arab Emirates13
- Colombia6