Attack traffic from Türkiye
Honeypot telemetry for sources geolocated to Türkiye
Observed by OffSeq honeypot sensors · last 30 days · last seen 16 minutes ago · first observed 2026-09-25 (29 days ago)
101,439
Attacks
562
Distinct source IPs
2
KEV exploit hits
Attack traffic is led by CHERRYSERVERS3-AS.
OffSeq honeypot sensors recorded 101,439 attacks from 562 distinct hosts geolocated to Türkiyein the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1657 Financial Theft52,744
- T1110 Brute Force29,341
- T1190 Exploit Public-Facing Application4,759
- T1046 Network Service Discovery4,199
- T1595 Active Scanning2,894
- T1021.005 VNC2,745
- T1595.002 Vulnerability Scanning286
- T0846 Remote System Discovery132
- T1210 Exploitation of Remote Services129
- T1090 Proxy72
- T1498.002 Reflection Amplification50
- T1187 Forced Authentication46
Top networks (ASNs)
- CHERRYSERVERS3-AS53,251
- TTNET19,081
- DRIFTNET9,938
- VEGANET-TELEKOM3,694
- HOSTINGDUNYAM HOSTING DUNYAM1,745
- XSERVERCLOUD1,503
- ITHOSTLINE1,424
- GHOST460