Attack traffic from Albania

Honeypot telemetry for sources geolocated to Albania

Observed by OffSeq honeypot sensors · last 30 days · last seen 8 hours ago · first observed 2026-09-29 (25 days ago)

820

Attacks

Distinct source IPs

Attack traffic is led by HOSTROYALE.

OffSeq honeypot sensors recorded 820 attacks from 99 distinct hosts geolocated to Albaniain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force444
T1190 Exploit Public-Facing Application282
T1059 Command and Scripting Interpreter39
T1021.005 VNC17
T1046 Network Service Discovery7
T1552 Unsecured Credentials5
T1595 Active Scanning4
T1595.002 Vulnerability Scanning2

Top networks (ASNs)

HOSTROYALE495
ONEALBANIA-AS61

Open the live view → Get this in real time →