AS53667 — PONYNET
Attacker network profile
Observed by OffSeq honeypot sensors · last 30 days · last seen 3 hours ago · first observed 2026-09-25 (29 days ago)
8,927
Attacks
71
Distinct source IPs
1
KEV exploit hits
Attacks from this network most often target T1105 Ingress Tool Transfer.
OffSeq honeypot sensors recorded 8,927 attacks from 71 distinct hosts within AS53667in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1105 Ingress Tool Transfer2,189
- T1021.005 VNC2,049
- T1110 Brute Force1,928
- T1190 Exploit Public-Facing Application380
- T1059 Command and Scripting Interpreter281
- T1595 Active Scanning271
- T1046 Network Service Discovery77
- T1595.002 Vulnerability Scanning41
- T1657 Financial Theft32
- T0846 Remote System Discovery10
- T1210 Exploitation of Remote Services7
Top countries
- United States5,501
- Luxembourg3,419