Attack traffic from Latvia

Honeypot telemetry for sources geolocated to Latvia

Observed by OffSeq honeypot sensors · last 30 days · last seen 1 hour ago · first observed 2026-09-26 (28 days ago)

1,366

Attacks

Distinct source IPs

Attack traffic is led by APOLLO-AS Latvia.

OffSeq honeypot sensors recorded 1,366 attacks from 57 distinct hosts geolocated to Latviain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1190 Exploit Public-Facing Application806
T1595 Active Scanning245
T1059 Command and Scripting Interpreter90
T1021.005 VNC28
T1589.002 Email Addresses24
T1110 Brute Force21
T1210 Exploitation of Remote Services2

Top networks (ASNs)

APOLLO-AS Latvia210
SA51
PACKETHUBSA22
TELE26

Open the live view → Get this in real time →