Attack traffic from Germany
Honeypot telemetry for sources geolocated to Germany
Observed by OffSeq honeypot sensors · last 30 days · last seen 11 minutes ago · first observed 2026-09-25 (29 days ago)
9,867,643
Attacks
3,686
Distinct source IPs
1,928
KEV exploit hits
Attack traffic is led by CONTABO, most often targeting CVE-2017-0144.
OffSeq honeypot sensors recorded 9,867,643 attacks from 3,686 distinct hosts geolocated to Germanyin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
- CVE-2017-0144930
- CVE-2024-4577478
- CVE-2021-26855460
- CVE-2012-212254
Techniques
- T1110 Brute Force8,818,329
- T1657 Financial Theft680,746
- T1021.005 VNC108,715
- T1190 Exploit Public-Facing Application82,634
- T1595 Active Scanning36,321
- T1552 Unsecured Credentials9,714
- T1046 Network Service Discovery6,098
- T1059 Command and Scripting Interpreter5,556
- T1595.002 Vulnerability Scanning4,935
- T1210 Exploitation of Remote Services866
- T1592 Gather Victim Host Information696
- T1552.001 Credentials In Files457
Top networks (ASNs)
- CONTABO8,170,705
- IONOS-AS This is the joint network for575,325
- ESAB-AS446,530
- HETZNER-AS207,247
- OMEGATECH-AS108,801
- CHERRYSERVERS2-AS37,182
- CHERRYSERVERS3-AS34,845
- DIGITALOCEAN-ASN22,541
- RUB-AS18,019
- REGXA-CLOUD17,572