Attack traffic from Ecuador
Honeypot telemetry for sources geolocated to Ecuador
Observed by OffSeq honeypot sensors · last 30 days · last seen 6 hours ago · first observed 2026-09-25 (28 days ago)
3,517
Attacks
568
Distinct source IPs
Attack traffic is led by UFINET PANAMA S.A..
OffSeq honeypot sensors recorded 3,517 attacks from 568 distinct hosts geolocated to Ecuadorin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force1,818
- T1190 Exploit Public-Facing Application1,515
- T1595 Active Scanning97
- T1210 Exploitation of Remote Services18
- T1552 Unsecured Credentials16
- T0846 Remote System Discovery10
- T1187 Forced Authentication6
- T1595.002 Vulnerability Scanning5
- T1589.002 Email Addresses4
- T1046 Network Service Discovery2
- T1059 Command and Scripting Interpreter2