AS51396 — CONTABO

Attacker network profile

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

952

Attacks

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 952 attacks from 21 distinct hosts within AS51396in the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1190 Exploit Public-Facing Application426
T1595.002 Vulnerability Scanning258
T1110 Brute Force44
T1046 Network Service Discovery37
T1595 Active Scanning31
T1498.002 Reflection Amplification16
T1552.001 Credentials In Files4

Services attacked

HTTP625
HTTPS157
Redis24
NTP16
SMTP12
MQTT12
FTP10

Top countries

Germany556
St Kitts and Nevis340
Spain56

Sample request paths

/ 443 /vpn/index.html /.env /adminer.php

Open the live view →