Attack traffic from Canada
Honeypot telemetry for sources geolocated to Canada
Observed by OffSeq honeypot sensors · last 30 days · last seen 3 minutes ago · first observed 2026-08-03 (30 days ago)
82,492
Attacks
885
Distinct source IPs
11
KEV exploit hits
Attack traffic is led by MICROSOFT-CORP-MSN-AS-BLOCK, most often targeting CVE-2021-26855.
OffSeq honeypot sensors recorded 82,492 attacks from 885 distinct hosts geolocated to Canadain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
- CVE-2021-26855225
- CVE-2024-4577137
Techniques
- T1110 Brute Force31,430
- T1595 Active Scanning27,637
- T1190 Exploit Public-Facing Application10,631
- T1021.005 VNC5,718
- T1552 Unsecured Credentials1,860
- T1592 Gather Victim Host Information597
- T1498.002 Reflection Amplification290
- T1505 Server Software Component196
- T1595.002 Vulnerability Scanning158
- T1059 Command and Scripting Interpreter154
- T1505.003 Web Shell144
- T1046 Network Service Discovery102
Top networks (ASNs)
- MICROSOFT-CORP-MSN-AS-BLOCK24,045
- DIGITALOCEAN-ASN7,688
- OVH6,986
- ONEPROVIDER-AS BrainStorm Network, Inc5,426
- IDIGITAL4,054
- VPN Consumer Toronto, Canada3,869
- Ace Data Centers II, LLC1,761
- NUDAY1,415
- Private Customer1,301
- GTCOMM904
- 3xK Tech GmbH656
- FREE RANGE CLOUD344