T1105 — Ingress Tool Transfer
MITRE ATT&CK technique observed against the OffSeq honeypot fleet
Last 30 days · #6 most-observed technique · last seen 17 minutes ago
220,489
Observed attacks
628
Distinct source IPs
The #6 most-observed ATT&CK technique across captured attacks.
Ingress tool transfer — pulling additional payloads onto a victim. OffSeq honeypots observed this technique in 220,489 attacks from 628 distinct source IPs over the last 30 days.
Top CVEs exploited across the fleet (last 30 days)
Fleet-wide, not scoped to T1105.
- CVE-2017-01442,731
- CVE-2019-07082,655
- CVE-2024-45771,682
- CVE-2021-268551,652
- CVE-2017-9841542
- CVE-2025-5777269
- CVE-2023-3519150
- CVE-2012-212283