Attack traffic from United Kingdom
Honeypot telemetry for sources geolocated to United Kingdom
Observed by OffSeq honeypot sensors · last 30 days · last seen 12 minutes ago · first observed 2026-09-25 (29 days ago)
1,532,613
Attacks
3,300
Distinct source IPs
448
KEV exploit hits
Attack traffic is led by IONOS-AS This is the joint network for, most often targeting CVE-2021-26855.
OffSeq honeypot sensors recorded 1,532,613 attacks from 3,300 distinct hosts geolocated to United Kingdomin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
- CVE-2021-26855180
- CVE-2024-4577176
Techniques
- T1110 Brute Force745,328
- T1657 Financial Theft632,082
- T1190 Exploit Public-Facing Application60,623
- T1021.005 VNC30,073
- T1595 Active Scanning10,646
- T1046 Network Service Discovery7,416
- T1595.002 Vulnerability Scanning5,026
- T1552 Unsecured Credentials1,002
- T0846 Remote System Discovery800
- T1059 Command and Scripting Interpreter543
- T1552.001 Credentials In Files497
- T1071.003 Mail Protocols353
Top networks (ASNs)
- IONOS-AS This is the joint network for1,219,463
- FIBERSTATE27,890
- SSDNETWORKS23,666
- SHOCK-120,940
- BATTLEHOST BattleHost17,920
- REGXA-CLOUD15,829
- M24713,716
- BANDWIDTH-AS12,487
- STORMCLOUD-AS - Storm Industries LLC11,898
- SERVHOST-AS9,884
- DRIFTNET9,855