Attack traffic from Nepal

Honeypot telemetry for sources geolocated to Nepal

Observed by OffSeq honeypot sensors · last 30 days · last seen 13 hours ago · first observed 2026-08-04 (29 days ago)

386

Attacks

Distinct source IPs

Attack traffic is led by NPTELECOM-NP-AS Nepal Telecommunications Corpora.

OffSeq honeypot sensors recorded 386 attacks from 30 distinct hosts geolocated to Nepalin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force155
T1059 Command and Scripting Interpreter68
T1210 Exploitation of Remote Services10
T1595 Active Scanning6
T1046 Network Service Discovery1

Top networks (ASNs)

NPTELECOM-NP-AS Nepal Telecommunications Corpora13
CG Digital5
SJN-AS-AP Sajilo Net Pvt Ltd3
WLINK-NEPAL-AS-AP WorldLink Communications Pvt L3
SSCNPL-AS-AP Super Sitapaila Cable Net Pvt. Ltd2
POKHARA-AS-AP Pokhara Internet Pvt. Ltd.1
WEBSURFERNP-AS-NP Websurfer Nepal Internet Servi1
SUBISU_Corporate_Pool151

Open the live view →