T1187 — Forced Authentication
MITRE ATT&CK technique observed against the OffSeq honeypot fleet
Last 30 days · #15 most-observed technique · last seen 25 minutes ago
4,904
Observed attacks
1,048
Distinct source IPs
The #15 most-observed ATT&CK technique across captured attacks.
MITRE ATT&CK technique T1187 (Forced Authentication), observed against the OffSeq honeypot fleet. OffSeq honeypots observed this technique in 4,904 attacks from 1,048 distinct source IPs over the last 30 days.
Top CVEs exploited across the fleet (last 30 days)
Fleet-wide, not scoped to T1187.
- CVE-2017-01442,731
- CVE-2019-07082,655
- CVE-2024-45771,682
- CVE-2021-268551,652
- CVE-2017-9841542
- CVE-2025-5777269
- CVE-2023-3519150
- CVE-2012-212283