Attack traffic from Italy
Honeypot telemetry for sources geolocated to Italy
Observed by OffSeq honeypot sensors · last 30 days · last seen 10 minutes ago · first observed 2026-09-25 (29 days ago)
712,404
Attacks
503
Distinct source IPs
Attack traffic is led by CONTABO.
OffSeq honeypot sensors recorded 712,404 attacks from 503 distinct hosts geolocated to Italyin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force694,956
- T1021.005 VNC7,457
- T1190 Exploit Public-Facing Application1,618
- T1595 Active Scanning918
- T1552 Unsecured Credentials356
- T1071.003 Mail Protocols291
- T1046 Network Service Discovery89
- T1059 Command and Scripting Interpreter78
- T1595.002 Vulnerability Scanning29
- T0846 Remote System Discovery26
- T1210 Exploitation of Remote Services23
- T1592 Gather Victim Host Information23
Top networks (ASNs)
- CONTABO686,742
- FASTWEB15,851
- -Reserved AS-3,071
- ONEPROVIDER-AS BrainStorm Network2,290
- M2471,158
- Cinzia Tocci trading as Lumanex Srl849
- ASN-IBSNAZ343
- ASN-WINDTRE IUNET284
- ORACLE-BMC-31898228
- VODAFONE-IT-ASN218
- HZ-EU-AS208