Attack traffic from Mongolia

Honeypot telemetry for sources geolocated to Mongolia

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

124

Attacks

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 124 attacks from 24 distinct hosts geolocated to Mongoliain the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1190 Exploit Public-Facing Application80
T1595.002 Vulnerability Scanning24
T1046 Network Service Discovery12
T1210 Exploitation of Remote Services4
T1595 Active Scanning4

Services attacked

HTTP84
HTTPS12
MQTT8
SMB4

Top networks (ASNs)

GEMNET-MN GEMNET LLC73
MOBICOM-AS-MN MobiCom Corporation2
UNIVISION-AS-AP UNIVISION LLC1

Sample request paths

/ /c/ /stalker_portal/server/tools/auth_simple.php /vpn/index.html /login

Open the live view →