Attack traffic from Kazakhstan

Honeypot telemetry for sources geolocated to Kazakhstan

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-09-01

1,251

Attacks

Distinct hosts (/16-masked)

OffSeq honeypot sensors recorded 1,251 attacks from 15 distinct hosts geolocated to Kazakhstanin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force814
T1021.005 VNC159
T1190 Exploit Public-Facing Application147
T1595 Active Scanning5
T1210 Exploitation of Remote Services4
T1046 Network Service Discovery2

Services attacked

VNC1,034
HTTPS99
HTTP53
MySQL48
Microsoft SQL Server9
SMB4
SSH2

Top networks (ASNs)

HOSTER-AST Hoster.KZ - Astana1,034
TNS94
KAR-TEL-AS Almaty, Republic of Kazakhstan4
NLS Networks IPoE4
OPTINET-AS3
GSLNETWORKS-AS-AP GSL Networks Pty LTD3
JSC Kazakhtelecom, Kazakhstan Online Backbone2

Sample request paths

/index.php / /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php /public/index.php /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

Open the live view →