Attack traffic from Paraguay
Honeypot telemetry for sources geolocated to Paraguay
Observed by OffSeq honeypot sensors · last 30 days · last seen 1 day ago · first observed 2026-08-04 (29 days ago)
12,716
Attacks
24
Distinct source IPs
Attack traffic is led by Nucleo S.A..
OffSeq honeypot sensors recorded 12,716 attacks from 24 distinct hosts geolocated to Paraguayin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
Techniques
- T1110 Brute Force9,840
- T1187 Forced Authentication1,876
- T1210 Exploitation of Remote Services894
- T1595.002 Vulnerability Scanning18
- T1595 Active Scanning7
- T1552.001 Credentials In Files4
- T1046 Network Service Discovery4
- T1059 Command and Scripting Interpreter3
- T1190 Exploit Public-Facing Application1