Attack traffic from Indonesia

Honeypot telemetry for sources geolocated to Indonesia

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

19,409

Attacks

198

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 19,409 attacks from 198 distinct hosts geolocated to Indonesiain the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force10,143
T1021.005 VNC5,859
T1190 Exploit Public-Facing Application387
T1595 Active Scanning133
T1552 Unsecured Credentials79
T1210 Exploitation of Remote Services77
T1059 Command and Scripting Interpreter28
T1046 Network Service Discovery5

Services attacked

VNC15,135
Microsoft SQL Server3,169
HTTP321
HTTPS296
SSH195
RDP160
SMB77
SIP21

Top networks (ASNs)

STARNET-AS-ID PT. Cemerlang Multimedia3,087
IDNIC-JETORBIT-AS-ID PT Jetorbit Teknologi Indon3,080
IDNIC-HERZA-AS-ID PT Herza Digital Indonesia2,777
IDNIC-IDCLOUDHOST-AS-ID PT Cloud Hosting Indones2,505
TELKOMNET-AS-AP PT Telekomunikasi Indonesia835
TENCENT-NET-AP-CN Tencent Building, Kejizhongyi 736
CLOUDHOST-AS-AP Cloud Host Pte Ltd483
IDNIC-JALANET-AS-ID PT. Jupiter Jala Arta473

Sample request paths

/ /login/ /.env /_asterisk/admin.php /index.php

Open the live view →