Attack traffic from Colombia
Honeypot telemetry for sources geolocated to Colombia
Observed by OffSeq honeypot sensors · last 30 days · last seen 6 hours ago · first observed 2026-09-25 (29 days ago)
15,199
Attacks
855
Distinct source IPs
1
KEV exploit hits
Attack traffic is led by Telmex Colombia S.A..
OffSeq honeypot sensors recorded 15,199 attacks from 855 distinct hosts geolocated to Colombiain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force12,405
- T1190 Exploit Public-Facing Application2,321
- T1210 Exploitation of Remote Services104
- T1595 Active Scanning81
- T1187 Forced Authentication42
- T1059 Command and Scripting Interpreter26
- T1552 Unsecured Credentials23
- T1595.002 Vulnerability Scanning22
- T1021.005 VNC11
- T1046 Network Service Discovery6
- T1657 Financial Theft2
Top networks (ASNs)
- Telmex Colombia S.A.10,472
- Telmex Colombia S.A.1,500
- ETB - Colombia778
- UNE EPM TELECOMUNICACIONES S.A.594
- COLOMBIA TELECOMUNICACIONES S.A. ESP BIC360
- INTERNEXA S.A. E.S.P262
- ORACLE-BMC-31898189
- UFINET PANAMA S.A.166
- Media Commerce Partners S.A88
- TV AZTECA SUCURSAL COLOMBIA82
- LVLT-354965
- SOMOS NETWORKS COLOMBIA S.A.S. BIC40