IOC Radar
IPMediumSignal 28/100

154.83.103.102

Location
ThailandThailand
Bangkok, Bangkok
First Seen
Apr 4, 2025
Last Seen
Apr 7, 2026
Apr 4
First Seen
437d ago
Apr 7
Last Seen
69d ago
14
Reports
source reports
28%
Confidence
medium
3/91
VirusTotal
detections
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
28%
Signal Score
28 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

30 techniques

Network Information

CountryTHThailand
RegionBangkok, Bangkok
OrganizationCloud Innovation Ltd

Feed Intelligence Summary

14 reports28% confidence
14
Source reports
28%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningapacheapache attackerasiaattackbad reputationbad web botbotnetbotnet activitybrute forcebrute force attackbrute force attacksc2 communicationcommand & controlcommand and controlcommunication protocolcowrie activitycowrie honeypotcredential accesscredential stuffingdata exfiltrationdata exfiltration attemptsdata store exposuredatabase securityddosddos attackdecoy systemdenial of servicedionaea activitydionaea honeypotdistributed attackseuropeexploitation activityfranceftp brute forcehong konghttp exploitationidentity & access exploitationindicatorinjection activityinjection attacksmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemalware distributionnetworknetwork intrusionnetwork scanningnetwork securitypassword attackspossible botnet activityprocess injectionreconnaissanceremote accessremote servicesresearchedresource hijackingscannerscanning activitysecurity operationssecurity policysentrypeer activitysentrypeer botnetseychellessftp attacksip brute forcespamssh attackssh monitoringt1021t1021.001t1021.004t1040t1041t1046t1055t1059t1059.003t1059.004t1071.001t1076t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1496t1499.001t1499.002t1499.003t1563t1565t1595t1595.001t1595.002t1595.003tannertelecommunicationsthailandthreat actorthreat intelligencethreat preventiontor nodetpotunauthorized accessunauthorized access attemptvoipvoip attackweb application attackweb exploitationweb spam

Activity Timeline

1 total obs
Apr 7Apr 7

Threat Activity Heatmap

· Peak: 2026-04-07
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
28
SIGNAL
Signal Score
28%
Confidence
14
Reports
First seenApr 4, 2025
Last seenApr 7, 2026
GeolocationTH
CountryThailand
LocationBangkok, Bangkok
OrgCloud Innovation Ltd
Coords22.2578, 114.1657

VirusTotal

3/ 91vendors flagged
3% detection rateJun 13, 2026

WHOIS

description
2025-04-09T23:17:00.182Z Honeypot : Tanner : Source: 154.83.103.102 : Port: 80 Post Data: {'version': '0.6.0', 'response': {'message': {'detection': {'version': '0.6.0', 'order': 1, 'name': 'index', 'type': 1}, 'sess_uuid': 'ee79a8f6-6155-4561-9fce-860654ba4036'}}}
raw
inetnum: 154.83.103.0 - 154.83.103.255 netname: Cloud_Innovation descr: Cloud Innovation Ltd country: TH admin-c: CIS1-AFRINIC tech-c: CIS1-AFRINIC status: ASSIGNED PA mnt-by: CIL1-MNT mnt-by: LARUS-SERVICE-MNT source: AFRINIC # Filtered parent: 154.80.0.0 - 154.95.255.255 person: Cloud Innovation Support address: Ebene address: MU address: Mahe address: Seychelles phone: tel:+248-4-610-795 nic-hdl: CIS1-AFRINIC abuse-mailbox: [email protected] mnt-by: CIL1-MNT source: AFRINIC # Filtered
references
https://github.com/telekom-security/tpotce, https://example.com

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 2 months ago
Appeared in 14 threat reports