Attack traffic from Canada
Honeypot telemetry for sources geolocated to Canada
Observed by OffSeq honeypot sensors · last 30 days · last seen 11 minutes ago · first observed 2026-09-25 (29 days ago)
588,307
Attacks
1,372
Distinct source IPs
441
KEV exploit hits
Attack traffic is led by ROUTERHOSTING, most often targeting CVE-2021-26855.
OffSeq honeypot sensors recorded 588,307 attacks from 1,372 distinct hosts geolocated to Canadain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
- CVE-2021-26855218
- CVE-2024-4577217
Techniques
- T1110 Brute Force441,610
- T1190 Exploit Public-Facing Application56,889
- T1657 Financial Theft14,412
- T1021.005 VNC12,607
- T1595 Active Scanning9,916
- T1552 Unsecured Credentials2,484
- T1046 Network Service Discovery1,468
- T1059 Command and Scripting Interpreter892
- T1595.002 Vulnerability Scanning277
- T1592 Gather Victim Host Information255
- T1071.003 Mail Protocols41
- T1105 Ingress Tool Transfer19
Top networks (ASNs)
- ROUTERHOSTING420,110
- OVH79,014
- DYNU15,218
- HZ-CA-AS9,121
- REGXA-CLOUD8,589
- DIGITALOCEAN-ASN7,992
- GOOGLE-CLOUD-PLATFORM4,162
- SERVER-MANIA3,542