Attack traffic from Denmark

Honeypot telemetry for sources geolocated to Denmark

Observed by OffSeq honeypot sensors · last 30 days · last seen 3 minutes ago · first observed 2026-08-03 (30 days ago)

66,187

Attacks

Distinct source IPs

Attack traffic is led by CDNEXT.

OffSeq honeypot sensors recorded 66,187 attacks from 39 distinct hosts geolocated to Denmarkin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force62,032
T1190 Exploit Public-Facing Application271
T1595 Active Scanning31
T1595.002 Vulnerability Scanning20
T1046 Network Service Discovery8

Top networks (ASNs)

CDNEXT7,374
NETCUP-AS netcup GmbH97
ZENCURITY-NET75
IST-AS31
FASTSPEED A/S17
DOTSRC6
GSLNETWORKS-AS-AP GSL Networks Pty LTD4
LATITUDE-SH4
Rezolved ApS2
VPN Consumer Copenhagen, Denmark1
TDC TDC AS1
Microsoft Limited1

Open the live view →