Attack traffic from Lithuania
Honeypot telemetry for sources geolocated to Lithuania
Observed by OffSeq honeypot sensors · last 30 days · last seen 2 minutes ago · first observed 2026-09-25 (29 days ago)
189,958
Attacks
305
Distinct source IPs
Attack traffic is led by CHERRYSERVERS3-AS.
OffSeq honeypot sensors recorded 189,958 attacks from 305 distinct hosts geolocated to Lithuaniain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1657 Financial Theft106,871
- T1110 Brute Force44,766
- T1190 Exploit Public-Facing Application12,039
- T1021.005 VNC10,468
- T1595.002 Vulnerability Scanning5,547
- T1552.001 Credentials In Files868
- T1595 Active Scanning855
- T1046 Network Service Discovery324
- T1498.002 Reflection Amplification122
- T1071.003 Mail Protocols109
- T1589.002 Email Addresses58
- T0846 Remote System Discovery49
Top networks (ASNs)
- CHERRYSERVERS3-AS106,486
- TELE-AS Tele Asia Limited33,916
- BELCLOUD Premium IP transit network26,250
- TC DATACENTER LIMITED MANAGED IP SPACE1,443
- IST-AS1,116
- HUTCHISON-AS-AP HGC Global1,039
- COD708
- CHERRYSERVERS1-AS696
- HOSTBALTIC640
- DATACRUNCH519
- AS-ALVIVA198
- BANDWIDTH-AS120