Attack traffic from Czechia
Honeypot telemetry for sources geolocated to Czechia
Observed by OffSeq honeypot sensors · last 30 days · last seen 6 minutes ago · first observed 2026-09-25 (29 days ago)
29,770
Attacks
44
Distinct source IPs
Attack traffic is led by SECFIREWALLAS.
OffSeq honeypot sensors recorded 29,770 attacks from 44 distinct hosts geolocated to Czechiain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force20,429
- T1021.005 VNC4,412
- T1595 Active Scanning1,139
- T1190 Exploit Public-Facing Application512
- T1595.002 Vulnerability Scanning16
- T1505.003 Web Shell14
- T1046 Network Service Discovery8
- T1552.001 Credentials In Files6
- T1505 Server Software Component5
- T1552 Unsecured Credentials2
- T1592 Gather Victim Host Information1