AS61254 — ESTOXY-OU

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 1 day ago · first observed 2026-09-26 (28 days ago)

4,136

Attacks

Distinct source IPs

Attacks from this network most often target T1657 Financial Theft.

OffSeq honeypot sensors recorded 4,136 attacks from 18 distinct hosts within AS61254in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1657 Financial Theft1,712
T1110 Brute Force1,500
T1190 Exploit Public-Facing Application366
T1105 Ingress Tool Transfer236
T1595.002 Vulnerability Scanning154
T1046 Network Service Discovery82
T1595 Active Scanning53
T1552 Unsecured Credentials23

Top countries

The Netherlands3,476
United States637
Estonia23

Open the live view → Get this in real time →