AS50304 — BLIX
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 6 hours ago · first observed 2026-09-25 (29 days ago)
2,419
Attacks
7
Distinct source IPs
Attacks from this network most often target T1595 Active Scanning.
OffSeq honeypot sensors recorded 2,419 attacks from 7 distinct hosts within AS50304in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1595 Active Scanning989
- T1190 Exploit Public-Facing Application907
- T1046 Network Service Discovery263
- T1078 Valid Accounts75
- T1552 Unsecured Credentials53
- T1595.002 Vulnerability Scanning38
- T1530 Data from Cloud Storage17
- T1110 Brute Force17
- T1589 Gather Victim Identity Information16
- T1505.003 Web Shell10
- T1498.002 Reflection Amplification10
- T1657 Financial Theft9