AS63949 — AKAMAI-LINODE-AP Akamai Connected Cloud
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 18 minutes ago · first observed 2026-09-25 (29 days ago)
30,485
Attacks
479
Distinct source IPs
14
KEV exploit hits
Attacks from this network most often target T1190 Exploit Public-Facing Application.
OffSeq honeypot sensors recorded 30,485 attacks from 479 distinct hosts within AS63949in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1190 Exploit Public-Facing Application14,218
- T1595.002 Vulnerability Scanning4,137
- T1110 Brute Force4,058
- T1595 Active Scanning3,751
- T1046 Network Service Discovery1,725
- T1021.005 VNC1,191
- T0846 Remote System Discovery354
- T1498.002 Reflection Amplification123
- T1210 Exploitation of Remote Services121
- T1552.001 Credentials In Files22
- T1105 Ingress Tool Transfer19
- T1059 Command and Scripting Interpreter12
Top countries
- United States22,113
- Singapore1,806
- Japan1,753
- United Kingdom1,626
- Germany1,517
- Canada917
- Australia186
- The Netherlands122
- India112
- France91
- Czechia72
- Kuwait57