Attack traffic from Paraguay

Honeypot telemetry for sources geolocated to Paraguay

Observed by OffSeq honeypot sensors · last 30 days · last seen 8 hours ago · first observed 2026-09-25 (29 days ago)

6,018

Attacks

660

Distinct source IPs

Attack traffic is led by Nucleo S.A..

OffSeq honeypot sensors recorded 6,018 attacks from 660 distinct hosts geolocated to Paraguayin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force3,712
T1190 Exploit Public-Facing Application2,227
T1210 Exploitation of Remote Services25
T1552 Unsecured Credentials19
T1595 Active Scanning15
T1187 Forced Authentication5
T1046 Network Service Discovery2

Top networks (ASNs)

Nucleo S.A.3,450
Techtel LMDS Comunicaciones998
Telecel S.A.600
COMPANIA PARAGUAYA DE COMUNICACIONES323
SOL TELECOMUNICACIONES S.A.97
RED PARAGUAYA DE TELECOMUNICACIONES SA70
GIG@NET SOCIEDAD ANONIMA68
UFINET PANAMA S.A.48
STARTELECOM S.A.36

Open the live view → Get this in real time →