AS61254 — ESTOXY-OU

Attacker network profile

Observed by OffSeq honeypot sensors · last 30 days · last seen 8 hours ago · first observed 2026-08-19 (26 days ago)

354,461

Attacks

Distinct source IPs

Attacks from this network most often target T1105 Ingress Tool Transfer.

OffSeq honeypot sensors recorded 354,461 attacks from 8 distinct hosts within AS61254in the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1105 Ingress Tool Transfer353,645
T1110 Brute Force414
T1657 Financial Theft294
T1190 Exploit Public-Facing Application79
T1046 Network Service Discovery8
T1595.002 Vulnerability Scanning6
T1552.001 Credentials In Files5
T1595 Active Scanning4

Top countries

The Netherlands354,267
United States194

Open the live view →