Attack traffic from Belarus

Honeypot telemetry for sources geolocated to Belarus

Observed by OffSeq honeypot sensors · last 30 days · last seen 7 hours ago · first observed 2026-09-25 (28 days ago)

388

Attacks

101

Distinct source IPs

Attack traffic is led by BELPAK-AS BELPAK.

OffSeq honeypot sensors recorded 388 attacks from 101 distinct hosts geolocated to Belarusin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1190 Exploit Public-Facing Application279
T1110 Brute Force42
T1595 Active Scanning39
T1210 Exploitation of Remote Services8
T1046 Network Service Discovery6
T1595.002 Vulnerability Scanning5
T1552 Unsecured Credentials3

Top networks (ASNs)

BELPAK-AS BELPAK227
IST-AS62
CLOUVIDER Clouvider - Global ASN58

Open the live view → Get this in real time →