Attack traffic from Australia
Honeypot telemetry for sources geolocated to Australia
Observed by OffSeq honeypot sensors · last 30 days · last seen 3 hours ago · first observed 2026-09-25 (29 days ago)
31,049
Attacks
299
Distinct source IPs
5
KEV exploit hits
Attack traffic is led by Microsoft Corporation.
OffSeq honeypot sensors recorded 31,049 attacks from 299 distinct hosts geolocated to Australiain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1595 Active Scanning14,719
- T1190 Exploit Public-Facing Application9,503
- T1110 Brute Force4,569
- T1595.002 Vulnerability Scanning335
- T1046 Network Service Discovery191
- T1552 Unsecured Credentials188
- T1592 Gather Victim Host Information142
- T1505 Server Software Component128
- T1505.003 Web Shell103
- T1059 Command and Scripting Interpreter28
- T1210 Exploitation of Remote Services17
- T0846 Remote System Discovery14
Top networks (ASNs)
- Microsoft Corporation14,168
- OVH9,019
- AMAZON-022,286
- ORACLE-BMC-318981,671
- HOST-AS-AP Host Universal Pty Ltd1,416
- UCLOUD-HK-AS-AP UCLOUD INFORMATION675
- SULAVIL - SULAVI LTD648
- DIGITALOCEAN-ASN511
- AKAMAI-LINODE-AP Akamai Connected Cloud186
- GOOGLE-CLOUD-PLATFORM98
- SUPERLOOP-AS-AP Superloop95
- CAPL-AS-AP Contabo Asia Private Limited50