Attack traffic from Brazil
Honeypot telemetry for sources geolocated to Brazil
Observed by OffSeq honeypot sensors · last 30 days · last seen 12 minutes ago · first observed 2026-08-03 (30 days ago)
287,746
Attacks
947
Distinct source IPs
2
KEV exploit hits
Attack traffic is led by Datacamp Limited.
OffSeq honeypot sensors recorded 287,746 attacks from 947 distinct hosts geolocated to Brazilin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force166,312
- T1021.005 VNC50,702
- T1657 Financial Theft49,866
- T1190 Exploit Public-Facing Application5,312
- T1595 Active Scanning4,528
- T1595.002 Vulnerability Scanning1,184
- T1187 Forced Authentication1,174
- T1210 Exploitation of Remote Services867
- T1059 Command and Scripting Interpreter704
- T1046 Network Service Discovery149
- T1505.003 Web Shell110
- T1552 Unsecured Credentials57
Top networks (ASNs)
- Datacamp Limited98,792
- BRASIL TECPAR | AMIGO | AVATO6,929
- TELEFONICA BRASIL S.A6,703
- SEMEAR TELECOM EIRELI5,531
- ORACLE-BMC-318984,157
- MICROSOFT-CORP-MSN-AS-BLOCK3,478
- QNAX LTDA1,843
- 6 COLLYER QUAY1,461
- CLARO S.A.1,237
- Palo Alto Networks, Inc996
- C-ComTelecom Servios Ltda-ME989
- BATTLEHOST BattleHost841