Attack traffic from Kazakhstan

Honeypot telemetry for sources geolocated to Kazakhstan

Observed by OffSeq honeypot sensors · last 30 days · last seen 13 minutes ago · first observed 2026-09-25 (29 days ago)

149,859

Attacks

234

Distinct source IPs

KEV exploit hits

Attack traffic is led by ALMAZCLOUD almazcloud.network.

OffSeq honeypot sensors recorded 149,859 attacks from 234 distinct hosts geolocated to Kazakhstanin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force66,866
T1190 Exploit Public-Facing Application57,743
T1021.005 VNC4,788
T1595 Active Scanning56
T1210 Exploitation of Remote Services55
T1046 Network Service Discovery26
T1595.002 Vulnerability Scanning24
T1552 Unsecured Credentials5
T1187 Forced Authentication3

Top networks (ASNs)

ALMAZCLOUD almazcloud.network122,739
HOSTER-AST Hoster.KZ - Astana22,861
KAZTELECOM-AS2,960
TELE2-KZ Tele2 Kazakhstan115
KAR-TEL-AS Almaty72
GREENFLOID-AS48
ASNLS21

Open the live view → Get this in real time →