Attack traffic from Thailand
Honeypot telemetry for sources geolocated to Thailand
Observed by OffSeq honeypot sensors · last 30 days · last seen 11 minutes ago · first observed 2026-08-03 (30 days ago)
16,491
Attacks
239
Distinct source IPs
Attack traffic is led by TTBP-AS-AP Triple T Broadband Public Company Lim.
OffSeq honeypot sensors recorded 16,491 attacks from 239 distinct hosts geolocated to Thailandin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force13,946
- T1187 Forced Authentication569
- T1210 Exploitation of Remote Services452
- T1595 Active Scanning345
- T1190 Exploit Public-Facing Application270
- T1021.005 VNC216
- T1046 Network Service Discovery190
- T1595.002 Vulnerability Scanning172
- T1059 Command and Scripting Interpreter62
- T1078 Valid Accounts10
- T1071.003 Mail Protocols8
- T1040 Network Sniffing4
Top networks (ASNs)
- TTBP-AS-AP Triple T Broadband Public Company Lim6,222
- TOT-NET TOT Public Company Limited4,743
- UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK299
- CSLOX-IDC-AS-AP CS LOXINFO Public Company Limite103
- MOE-AS-AP Ministry of education68
- TRUEONLINE-AS-AP True Online64
- CSLOXINFO-AS-AP CS LOXINFO PUBLIC COMPANY LIMITE39
- CAT-IDC-4BYTENET-AS-AP CAT TELECOM Public Compan15
- TRUEINTERNET-AS-AP TRUE INTERNET Co.,Ltd.14
- 16 COLLYER QUAY # 18-29 INCOME AT RAFFLES13
- CAT-CLOUD-AP CAT Telecom Public Company Limited12
- AIS-FIBRE-AS-AP AIS Fibre10