T1210 — Exploitation of Remote Services
MITRE ATT&CK technique observed against the OffSeq honeypot fleet
Last 30 days · #11 most-observed technique · last seen 17 minutes ago
26,887
Observed attacks
3,791
Distinct source IPs
The #11 most-observed ATT&CK technique across captured attacks.
Exploitation of a remote service to gain code execution. OffSeq honeypots observed this technique in 26,887 attacks from 3,791 distinct source IPs over the last 30 days.
Top CVEs exploited across the fleet (last 30 days)
Fleet-wide, not scoped to T1210.
- CVE-2017-01442,731
- CVE-2019-07082,655
- CVE-2024-45771,682
- CVE-2021-268551,652
- CVE-2017-9841542
- CVE-2025-5777269
- CVE-2023-3519150
- CVE-2012-212283