AS11878 — TZULO

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 7 minutes ago · first observed 2026-08-11 (29 days ago)

14,893

Attacks

Distinct source IPs

KEV exploit hits

Attacks from this network most often target T1110 Brute Force.

OffSeq honeypot sensors recorded 14,893 attacks from 48 distinct hosts within AS11878in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force9,190
T1021.005 VNC2,130
T1595 Active Scanning1,391
T1595.002 Vulnerability Scanning226
T1552 Unsecured Credentials217
T1190 Exploit Public-Facing Application157
T1592 Gather Victim Host Information104
T1071.003 Mail Protocols16
T1046 Network Service Discovery5

Top countries

United States14,893

Open the live view →