AS8075 — Microsoft Corporation
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 18 minutes ago · first observed 2026-09-25 (29 days ago)
102,289
Attacks
2,924
Distinct source IPs
Attacks from this network most often target T1595 Active Scanning.
OffSeq honeypot sensors recorded 102,289 attacks from 2,924 distinct hosts within AS8075in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1595 Active Scanning54,824
- T1110 Brute Force25,866
- T1190 Exploit Public-Facing Application13,838
- T1046 Network Service Discovery2,875
- T1595.002 Vulnerability Scanning1,801
- T1505.003 Web Shell573
- T1505 Server Software Component549
- T0846 Remote System Discovery455
- T1498.002 Reflection Amplification249
- T1592 Gather Victim Host Information239
- T1210 Exploitation of Remote Services119
- T1059 Command and Scripting Interpreter114
Top countries
- United States36,663
- South Korea19,061
- India16,426
- Australia14,168
- Japan6,212
- Hong Kong5,103
- United Kingdom1,102
- Mexico953
- Poland655
- Singapore625
- Sweden279
- Switzerland238