Attack traffic from Switzerland
Honeypot telemetry for sources geolocated to Switzerland
Observed by OffSeq honeypot sensors · last 30 days · last seen 11 minutes ago · first observed 2026-09-25 (29 days ago)
690,678
Attacks
130
Distinct source IPs
9
KEV exploit hits
Attack traffic is led by HOMELINE-AS.
OffSeq honeypot sensors recorded 690,678 attacks from 130 distinct hosts geolocated to Switzerlandin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force491,893
- T1657 Financial Theft87,641
- T1190 Exploit Public-Facing Application68,655
- T1021.005 VNC11,290
- T1595 Active Scanning723
- T1090 Proxy533
- T1046 Network Service Discovery197
- T1595.002 Vulnerability Scanning141
- T0846 Remote System Discovery22
- T1105 Ingress Tool Transfer11
- T1498.002 Reflection Amplification9
- T1210 Exploitation of Remote Services4
Top networks (ASNs)
- HOMELINE-AS462,002
- PLI-AS123,020
- HOSTING54,397
- M24723,885
- CDNEXT21,727
- REGXA-CLOUD3,592
- GRUPO PANAGLOBAL 15 S.A1,006
- Microsoft Corporation238
- DEDIK-CH215
- SUNRISE55