AS9808 — CONTABO

Attacker network profile

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

9,627

Attacks

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 9,627 attacks from 71 distinct hosts within AS9808in the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force8,342
T1021.005 VNC739
T1190 Exploit Public-Facing Application247
T1595.002 Vulnerability Scanning24
T1046 Network Service Discovery23
T1595 Active Scanning11
T1210 Exploitation of Remote Services6
T1187 Forced Authentication3

Services attacked

Microsoft SQL Server7,460
VNC945
SMB869
Redis178
HTTP71
HTTPS23
SMTP17

Top countries

China9,627

Sample request paths

/ /favicon.ico /login /vpn/index.html /remote/login

Open the live view →