Attack traffic from Spain

Honeypot telemetry for sources geolocated to Spain

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

1,967

Attacks

Distinct hosts (/16-masked)

KEV exploit hits

OffSeq honeypot sensors recorded 1,967 attacks from 32 distinct hosts geolocated to Spainin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

CVEs targeted

CVE-2025-57771
CVE-2023-49661
CVE-2019-197811
CVE-2023-35191

Techniques

T1595 Active Scanning1,358
T1190 Exploit Public-Facing Application281
T1110 Brute Force178
T1552 Unsecured Credentials53
T1595.002 Vulnerability Scanning27
T1046 Network Service Discovery14
T1505.003 Web Shell11
T1498.002 Reflection Amplification9

Services attacked

HTTP1,491
HTTPS157
SIP81
MongoDB40
RDP40
MySQL31
Memcached20

Top networks (ASNs)

Google LLC766
Microsoft Singapore Pte. Ltd.568
BUDUSCHEE154
IONOS SE66
M24759
PFCLOUD59
COGENT-17454
AXARNET COMUNICACIONES, S.L.52

Sample request paths

/ [email protected] [email protected] [email protected] [email protected]

Open the live view →