Attack traffic from Germany

Honeypot telemetry for sources geolocated to Germany

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

679,135

Attacks

1,007

Distinct hosts (/16-masked)

577

KEV exploit hits

OffSeq honeypot sensors recorded 679,135 attacks from 1,007 distinct hosts geolocated to Germanyin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

CVEs targeted

Techniques

T1110 Brute Force620,419
T1059 Command and Scripting Interpreter9,094
T1190 Exploit Public-Facing Application8,891
T1021.005 VNC8,731
T1595 Active Scanning8,645
T1657 Financial Theft6,334
T1046 Network Service Discovery1,327
T1552 Unsecured Credentials771

Services attacked

VNC530,009
SMTP57,627
HTTPS35,254
RDP14,790
SIP12,438
HTTP12,181
Telnet9,518

Top networks (ASNs)

CONTABO527,176
OMEGATECH-AS41,174
LATITUDE-SH17,495
STORMCLOUD-AS - Storm Industries LLC9,511
DigitalOcean, LLC5,899
LIMITEDNETWORK-AS3,663
M247 LTD Frankfurt Infrastructure3,143
ZAP-HOSTING2,042

Sample request paths

/remote/logincheck / /.env /wp-login.php /.git/config

Open the live view →