Attack traffic from Austria

Honeypot telemetry for sources geolocated to Austria

Observed by OffSeq honeypot sensors · last 30 days · last seen 16 minutes ago · first observed 2026-09-25 (29 days ago)

1,156

Attacks

Distinct source IPs

KEV exploit hits

Attack traffic is led by NETCUP-AS netcup GmbH.

OffSeq honeypot sensors recorded 1,156 attacks from 72 distinct hosts geolocated to Austriain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force738
T1190 Exploit Public-Facing Application155
T1595 Active Scanning35
T1595.002 Vulnerability Scanning21
T1046 Network Service Discovery6
T1552 Unsecured Credentials5
T1210 Exploitation of Remote Services1
T1021.005 VNC1
T1078 Valid Accounts1
T1552.001 Credentials In Files1

Top networks (ASNs)

NETCUP-AS netcup GmbH689
NETCUP167
CDN77 _107
CDNEXT23
IONOS-AS This is the joint network for22
M24715
ORACLE-BMC-318986

Open the live view → Get this in real time →