Attack traffic from Sweden

Honeypot telemetry for sources geolocated to Sweden

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

3,118

Attacks

170

Distinct hosts (/16-masked)

KEV exploit hits

OffSeq honeypot sensors recorded 3,118 attacks from 170 distinct hosts geolocated to Swedenin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

CVEs targeted

CVE-2024-238974

Techniques

T1595 Active Scanning1,208
T1021.005 VNC626
T1110 Brute Force418
T1190 Exploit Public-Facing Application380
T1090 Proxy108
T1595.002 Vulnerability Scanning32
T1552 Unsecured Credentials22
T1046 Network Service Discovery22

Services attacked

HTTP1,618
VNC767
SSH424
HTTPS132
PostgreSQL24
MySQL24
Redis22

Top networks (ASNs)

Microsoft Corporation1,062
ORACLE-BMC-31898535
W1N317
31173 Services AB infrastructure in Gothenburg, 256
GlobalConnect AB235
BAHNHOF89
PRQ-AS PRQ VPN Network85
KEFF Interplanetary Communications Network48

Sample request paths

/ /favicon.ico /wp-login.php /robots.txt /login

Open the live view →