AS49981 — WORLDSTREAM

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 2 days ago · first observed 2026-08-03 (29 days ago)

652

Attacks

Distinct source IPs

Attacks from this network most often target T1595 Active Scanning.

OffSeq honeypot sensors recorded 652 attacks from 6 distinct hosts within AS49981in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1595 Active Scanning503
T1552 Unsecured Credentials70
T1592 Gather Victim Host Information40
T1190 Exploit Public-Facing Application14
T1059 Command and Scripting Interpreter12
T1110 Brute Force5
T1046 Network Service Discovery2

Top countries

The Netherlands636
Canada14
Germany2

Open the live view →