AS3257 — GTT-BACKBONE GTT
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 12 hours ago · first observed 2026-09-25 (29 days ago)
60,699
Attacks
456
Distinct source IPs
Attacks from this network most often target T1190 Exploit Public-Facing Application.
OffSeq honeypot sensors recorded 60,699 attacks from 456 distinct hosts within AS3257in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1190 Exploit Public-Facing Application26,748
- T1110 Brute Force21,402
- T1046 Network Service Discovery269
- T1595.002 Vulnerability Scanning123
- T1595 Active Scanning109
- T0846 Remote System Discovery76
- T1105 Ingress Tool Transfer14
- T1021.005 VNC11
- T1210 Exploitation of Remote Services8
- T1040 Network Sniffing6
- T1498.002 Reflection Amplification4
- T1589.002 Email Addresses2
Top countries
- United States39,072
- Ukraine21,617
- The Netherlands4
- Germany3
- United Kingdom2
- Canada1