Attack traffic from Moldova

Honeypot telemetry for sources geolocated to Moldova

Observed by OffSeq honeypot sensors · last 30 days · last seen 26 minutes ago · first observed 2026-09-26 (28 days ago)

5,348

Attacks

Distinct source IPs

Attack traffic is led by ALEXHOST S.R.L..

OffSeq honeypot sensors recorded 5,348 attacks from 24 distinct hosts geolocated to Moldova in the last 30 days. Source addresses are aggregated to /16 networks; Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force2,769
T1190 Exploit Public-Facing Application844
T1021.005 VNC693
T1595 Active Scanning349
T1552 Unsecured Credentials63
T1210 Exploitation of Remote Services4
T1187 Forced Authentication3

Top networks (ASNs)

ALEXHOST S.R.L.3,823
Clouvider Limited1,450

Open the live view → Get this in real time →