Attack traffic from Armenia

Honeypot telemetry for sources geolocated to Armenia

Observed by OffSeq honeypot sensors · last 30 days · last seen 2 hours ago · first observed 2026-09-25 (29 days ago)

850

Attacks

Distinct source IPs

Attack traffic is led by AM-ISPSUPPORT.

OffSeq honeypot sensors recorded 850 attacks from 53 distinct hosts geolocated to Armeniain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1190 Exploit Public-Facing Application379
T1110 Brute Force297
T1595 Active Scanning76
T1046 Network Service Discovery42
T1595.002 Vulnerability Scanning25
T1059 Command and Scripting Interpreter9
T1210 Exploitation of Remote Services6
T1552 Unsecured Credentials1
T1021.005 VNC1

Top networks (ASNs)

AM-ISPSUPPORT181
ORG-UL31-RIPE54
M24710

Open the live view → Get this in real time →