Attack traffic from France
Honeypot telemetry for sources geolocated to France
Observed by OffSeq honeypot sensors · last 30 days · last seen 7 minutes ago · first observed 2026-09-25 (29 days ago)
1,726,996
Attacks
1,923
Distinct source IPs
50
KEV exploit hits
Attack traffic is led by OVH.
OffSeq honeypot sensors recorded 1,726,996 attacks from 1,923 distinct hosts geolocated to Francein the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force1,200,755
- T1657 Financial Theft367,935
- T1595 Active Scanning51,547
- T1021.005 VNC34,257
- T1190 Exploit Public-Facing Application19,652
- T1552 Unsecured Credentials4,073
- T1046 Network Service Discovery1,875
- T1059 Command and Scripting Interpreter1,875
- T1595.002 Vulnerability Scanning449
- T1592 Gather Victim Host Information430
- T1078 Valid Accounts94
- T0846 Remote System Discovery86
Top networks (ASNs)
- OVH1,435,355
- FBWNETWORKS67,454
- GODADDY-SXB52,612
- IONOS-AS This is the joint network for41,233
- Private Customer35,280
- VELIANET-AS velia.net Internetdienste33,953
- FBW NETWORKS SAS16,671
- Online SAS14,662
- GOLD IP L.L.C-FZ8,253
- ONYPHE4,675
- ORACLE-BMC-318983,319
- CONTABO2,781