Attack traffic from Norway

Honeypot telemetry for sources geolocated to Norway

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

718

Attacks

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 718 attacks from 8 distinct hosts geolocated to Norwayin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1595 Active Scanning336
T1190 Exploit Public-Facing Application243
T1046 Network Service Discovery72
T1110 Brute Force41
T1505.003 Web Shell7
T1059 Command and Scripting Interpreter5
T1592 Gather Victim Host Information5
T1021.005 VNC3

Services attacked

HTTP369
HTTPS225
Telnet8
VNC8

Top networks (ASNs)

Microsoft Corporation344
BLIX240
TELENOR-NEXTEL Telenor Norge AS8

Sample request paths

/ /Dr0v /v404/exec /av.php /wp-content.php

Open the live view →