Attack traffic from Portugal
Honeypot telemetry for sources geolocated to Portugal
Observed by OffSeq honeypot sensors · last 30 days · last seen 23 minutes ago · first observed 2026-09-25 (29 days ago)
10,163
Attacks
594
Distinct source IPs
Attack traffic is led by AS-BITSIGHT.
OffSeq honeypot sensors recorded 10,163 attacks from 594 distinct hosts geolocated to Portugalin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1190 Exploit Public-Facing Application4,594
- T1110 Brute Force2,199
- T1046 Network Service Discovery1,300
- T1595 Active Scanning876
- T1595.002 Vulnerability Scanning612
- T0846 Remote System Discovery234
- T1059 Command and Scripting Interpreter47
- T1210 Exploitation of Remote Services40
- T1498.002 Reflection Amplification40
- T1021.005 VNC39
- T1105 Ingress Tool Transfer23
- T1552.001 Credentials In Files7
Top networks (ASNs)
- AS-BITSIGHT5,379
- ZEN-ECN4,055
- NOS_COMUNICACOES323
- MEO-RESIDENCIAL187
- VODAFONE-PT Vodafone Portugal92
- SpaceX Services6