Attack traffic from Israel
Honeypot telemetry for sources geolocated to Israel
Observed by OffSeq honeypot sensors · last 30 days · last seen 1 day ago · first observed 2026-08-03 (30 days ago)
984
Attacks
61
Distinct source IPs
Attack traffic is led by VPN Consumer Network Services.
OffSeq honeypot sensors recorded 984 attacks from 61 distinct hosts geolocated to Israelin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1595 Active Scanning640
- T1110 Brute Force114
- T1046 Network Service Discovery51
- T1059 Command and Scripting Interpreter49
- T1595.002 Vulnerability Scanning33
- T1190 Exploit Public-Facing Application21
- T1210 Exploitation of Remote Services19
- T1105 Ingress Tool Transfer15
- T1505.003 Web Shell7
- T1090 Proxy2
- T1505 Server Software Component2
- T1552 Unsecured Credentials1