Attack traffic from Macao

Honeypot telemetry for sources geolocated to Macao

Observed by OffSeq honeypot sensors · last 30 days · last seen 9 days ago · first observed 2026-08-06 (26 days ago)

Attacks

Distinct source IPs

Attack traffic is led by CTM-MO Companhia de Telecomunicacoes de Macau SA.

OffSeq honeypot sensors recorded 88 attacks from 8 distinct hosts geolocated to Macaoin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force31
T1059 Command and Scripting Interpreter10
T1190 Exploit Public-Facing Application6
T1595.002 Vulnerability Scanning6
T1105 Ingress Tool Transfer4
T1046 Network Service Discovery2
T1595 Active Scanning1

Top networks (ASNs)

CTM-MO Companhia de Telecomunicacoes de Macau SA3

Open the live view →