Attack traffic from Seychelles
Honeypot telemetry for sources geolocated to Seychelles
Observed by OffSeq honeypot sensors · last 30 days · last seen just now · first observed 2026-09-25 (29 days ago)
134,535
Attacks
92
Distinct source IPs
Attack traffic is led by AS49870-BV.
OffSeq honeypot sensors recorded 134,535 attacks from 92 distinct hosts geolocated to Seychellesin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1657 Financial Theft90,783
- T1110 Brute Force36,118
- T1190 Exploit Public-Facing Application4,820
- T1595 Active Scanning229
- T1595.002 Vulnerability Scanning183
- T1046 Network Service Discovery119
- T1071.003 Mail Protocols116
- T1021.005 VNC12
- T1059 Command and Scripting Interpreter11
- T1105 Ingress Tool Transfer8
- T1210 Exploitation of Remote Services5
- T1552.001 Credentials In Files1
Top networks (ASNs)
- AS49870-BV117,492
- GHOSTYNETWORKS9,260
- CLOUVIDER Clouvider - Global ASN6,043
- Datashield556
- AS394
- BLATANTHOST - Blatant362
- HOST-INDUSTRY287
- COGNETCLOUD-222
- YISUCLOUDLTD-HK YISU CLOUD LTD13
- Airtek Solutions C.A.13