AS63949 — CONTABO

Attacker network profile

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

4,508

Attacks

248

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 4,508 attacks from 248 distinct hosts within AS63949in the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1190 Exploit Public-Facing Application1,263
T1595 Active Scanning996
T1110 Brute Force902
T1021.005 VNC512
T1046 Network Service Discovery245
T1595.002 Vulnerability Scanning241
T0846 T084677
T1210 Exploitation of Remote Services29

Services attacked

HTTP794
VNC686
HTTPS274
MongoDB260
Microsoft SQL Server199
RDP164
Redis164

Top countries

United States4,073
Japan218
Singapore83
Germany63
United Kingdom42
Australia17
Canada7
India4

Sample request paths

/ /login /vpn/index.html nm /nice%20ports%2C/Tri%6Eity.txt%2ebak

Open the live view →