Attack traffic from Vietnam
Honeypot telemetry for sources geolocated to Vietnam
Observed by OffSeq honeypot sensors · last 30 days · last seen 9 minutes ago · first observed 2026-09-25 (29 days ago)
215,119
Attacks
1,457
Distinct source IPs
188
KEV exploit hits
Attack traffic is led by INTERDIGI-VN INTERDIGI JOINT STOCK, most often targeting CVE-2019-0708.
OffSeq honeypot sensors recorded 215,119 attacks from 1,457 distinct hosts geolocated to Vietnamin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
Techniques
- T1110 Brute Force150,576
- T1021.005 VNC36,897
- T1190 Exploit Public-Facing Application4,216
- T1595 Active Scanning458
- T1059 Command and Scripting Interpreter314
- T1210 Exploitation of Remote Services258
- T1595.002 Vulnerability Scanning120
- T1046 Network Service Discovery40
- T1187 Forced Authentication34
- T1552.001 Credentials In Files32
- T1552 Unsecured Credentials26
- T1078 Valid Accounts13
Top networks (ASNs)
- INTERDIGI-VN INTERDIGI JOINT STOCK61,928
- AZDIGI-AS-VN AZDIGI Corporation40,624
- VNPT-AS-VN VNPT Corp16,089
- DVS-AS-VN VIET DIGITAL TECHNOLOGY10,977
- MOBIFONE-AS-VN MOBIFONE Corporation10,125
- VIETEL-AS-AP Viettel Group9,507
- EZTECH-VN EZ TECHNOLOGY COMPANY LIMITED7,042
- CMCTELECOM-VN CMC Telecom6,957
- VNPT-AS-VN VIETNAM POSTS AND5,700
- FPT-AS-AP FPT Telecom Company5,533