Attack traffic from The Netherlands

Honeypot telemetry for sources geolocated to The Netherlands

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

482,669

Attacks

801

Distinct hosts (/16-masked)

277

KEV exploit hits

OffSeq honeypot sensors recorded 482,669 attacks from 801 distinct hosts geolocated to The Netherlandsin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

CVEs targeted

Techniques

T1105 Ingress Tool Transfer278,485
T1110 Brute Force179,427
T1595 Active Scanning9,772
T1190 Exploit Public-Facing Application5,610
T1552 Unsecured Credentials1,721
T1021.005 VNC1,455
T1595.002 Vulnerability Scanning983
T1657 Financial Theft557

Services attacked

TFTP278,482
SIP167,440
HTTP15,078
HTTPS9,281
VNC7,138
SMTP1,070
SSH739

Top networks (ASNs)

ESTOXY-OU100,935
ROUTERHOSTING99,141
SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK79,055
DMZHOST7,463
Secure Internet LLC (UK)4,097
NEXTGENWEBS-NL3,653
DIGITALOCEAN-ASN2,003
BANDWIDTH-AS1,639

Sample request paths

/remote/logincheck / /.env /favicon.ico /.git/config

Open the live view →