Attack traffic from Belgium
Honeypot telemetry for sources geolocated to Belgium
Observed by OffSeq honeypot sensors · last 30 days · last seen 18 minutes ago · first observed 2026-09-25 (29 days ago)
90,375
Attacks
1,782
Distinct source IPs
22
KEV exploit hits
Attack traffic is led by OVH.
OffSeq honeypot sensors recorded 90,375 attacks from 1,782 distinct hosts geolocated to Belgiumin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force57,606
- T1190 Exploit Public-Facing Application13,413
- T1595 Active Scanning7,830
- T1552 Unsecured Credentials4,072
- T1657 Financial Theft3,334
- T1498.002 Reflection Amplification854
- T1595.002 Vulnerability Scanning829
- T1046 Network Service Discovery354
- T1187 Forced Authentication177
- T1210 Exploitation of Remote Services170
- T1078 Valid Accounts156
- T1505.003 Web Shell131
Top networks (ASNs)
- OVH48,135
- GOOGLE-CLOUD-PLATFORM38,755
- CONTABO-400211,465
- CAPL-AS-AP Contabo Asia Private Limited1,203
- REGXA-CLOUD438
- PROXIMUS-ISP-AS92
- Google LLC74
- M24744
- Unus16
- SECFIREWALLAS16