Attack traffic from Romania
Honeypot telemetry for sources geolocated to Romania
Observed by OffSeq honeypot sensors · last 30 days · last seen 10 minutes ago · first observed 2026-08-03 (30 days ago)
95,000
Attacks
113
Distinct source IPs
Attack traffic is led by UNMANAGED-DEDICATED-SERVERS.
OffSeq honeypot sensors recorded 95,000 attacks from 113 distinct hosts geolocated to Romaniain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force70,628
- T1190 Exploit Public-Facing Application11,366
- T1046 Network Service Discovery2,915
- T1595.002 Vulnerability Scanning1,978
- T1595 Active Scanning1,806
- T1021.005 VNC946
- T1059 Command and Scripting Interpreter459
- T1090 Proxy318
- T1210 Exploitation of Remote Services142
- T0855 T0855105
- T0846 T084651
- T1498.002 Reflection Amplification27