Attack traffic from Mexico
Honeypot telemetry for sources geolocated to Mexico
Observed by OffSeq honeypot sensors · last 30 days · last seen 2 hours ago · first observed 2026-09-25 (29 days ago)
14,383
Attacks
913
Distinct source IPs
Attack traffic is led by UNINET.
OffSeq honeypot sensors recorded 14,383 attacks from 913 distinct hosts geolocated to Mexicoin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force10,764
- T1190 Exploit Public-Facing Application2,155
- T1595 Active Scanning979
- T1210 Exploitation of Remote Services190
- T1046 Network Service Discovery57
- T1552 Unsecured Credentials41
- T1105 Ingress Tool Transfer36
- T1187 Forced Authentication33
- T1505 Server Software Component12
- T1505.003 Web Shell11
- T1059 Command and Scripting Interpreter10
- T1592 Gather Victim Host Information3