AS6939 — HURRICANE
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 14 hours ago · first observed 2026-08-19 (28 days ago)
21,801
Attacks
819
Distinct source IPs
3
KEV exploit hits
Attacks from this network most often target T1190 Exploit Public-Facing Application.
OffSeq honeypot sensors recorded 21,801 attacks from 819 distinct hosts within AS6939in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1190 Exploit Public-Facing Application13,498
- T1110 Brute Force3,674
- T1595.002 Vulnerability Scanning1,994
- T1046 Network Service Discovery1,092
- T1595 Active Scanning430
- T0846 T0846327
- T1498.002 Reflection Amplification316
- T1105 Ingress Tool Transfer107
- T1021.005 VNC101
- T1210 Exploitation of Remote Services54
- T1059 Command and Scripting Interpreter30
Top countries
- United States21,801