Attack traffic from United States
Honeypot telemetry for sources geolocated to United States
Observed by OffSeq honeypot sensors · last 30 days · last seen 11 minutes ago · first observed 2026-09-25 (29 days ago)
7,366,881
Attacks
28,302
Distinct source IPs
1,485
KEV exploit hits
Attack traffic is led by HOST-INDUSTRY, most often targeting CVE-2024-4577.
OffSeq honeypot sensors recorded 7,366,881 attacks from 28,302 distinct hosts geolocated to United Statesin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
- CVE-2024-4577472
- CVE-2021-26855471
- CVE-2025-5777249
- CVE-2019-070875
- CVE-2017-984164
- CVE-2023-351963
Techniques
- T1110 Brute Force4,672,641
- T1190 Exploit Public-Facing Application1,339,080
- T1021.005 VNC394,047
- T1657 Financial Theft105,883
- T1595 Active Scanning84,116
- T1046 Network Service Discovery58,809
- T1595.002 Vulnerability Scanning23,477
- T1059 Command and Scripting Interpreter18,538
- T1552 Unsecured Credentials13,798
- T1105 Ingress Tool Transfer5,694
- T0846 Remote System Discovery3,784
- T1498.002 Reflection Amplification3,279
Top networks (ASNs)
- HOST-INDUSTRY925,165
- AS-COLOCROSSING781,975
- DIGITALOCEAN-ASN779,035
- CONTABO571,740
- TZULO420,155
- CDNEXT342,901
- SERVICES-1337-GMBH268,000
- OVH246,701
- CLOUVIDER Clouvider - Global ASN175,605
- AS40676 - Psychz Networks172,555
- M247161,237