Attack traffic from Portugal

Honeypot telemetry for sources geolocated to Portugal

Observed by OffSeq honeypot sensors · last 7 days · last seen 2026-08-31

9,461

Attacks

245

Distinct hosts (/16-masked)

KEV exploit hits

OffSeq honeypot sensors recorded 9,461 attacks from 245 distinct hosts geolocated to Portugalin the last 7 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

CVEs targeted

CVE-2019-07082
CVE-2024-120842
CVE-2019-91931

Techniques

T1110 Brute Force7,260
T1190 Exploit Public-Facing Application1,001
T1046 Network Service Discovery370
T1595 Active Scanning246
T1021.005 VNC218
T1595.002 Vulnerability Scanning136
T0846 T084643
T1498.002 Reflection Amplification11

Services attacked

VNC6,611
HTTP446
HTTPS240
IMAP201
MongoDB162
RDP153
Microsoft SQL Server122

Top networks (ASNs)

NOS_COMUNICACOES1,971
AS-BITSIGHT1,129
ZEN-ECN794
NETSOLUTIONS6
HostRoyale Technologies Pvt Ltd2
DSL-ULL1

Sample request paths

/ /vpn/index.html /favicon.ico /login /sse

Open the live view →