Attack traffic from United Arab Emirates
Honeypot telemetry for sources geolocated to United Arab Emirates
Observed by OffSeq honeypot sensors · last 30 days · last seen 11 minutes ago · first observed 2026-09-25 (29 days ago)
145,681
Attacks
537
Distinct source IPs
448
KEV exploit hits
Attack traffic is led by HETZNER-AS, most often targeting CVE-2017-0144.
OffSeq honeypot sensors recorded 145,681 attacks from 537 distinct hosts geolocated to United Arab Emiratesin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.
CVEs targeted
Techniques
- T1110 Brute Force99,701
- T1657 Financial Theft17,618
- T1210 Exploitation of Remote Services14,989
- T1190 Exploit Public-Facing Application5,195
- T1021.005 VNC3,647
- T1187 Forced Authentication764
- T1552.001 Credentials In Files174
- T1595 Active Scanning147
- T1071.003 Mail Protocols79
- T1595.002 Vulnerability Scanning69
- T1046 Network Service Discovery48
- T1552 Unsecured Credentials9
Top networks (ASNs)
- HETZNER-AS111,130
- CHERRYSERVERS3-AS17,618
- BESTINTERNETSOLUTION-AS3,319
- CLOUVIDER Clouvider - Global ASN3,141
- Gamers Club Ltda2,749
- M2471,982
- RICAWEBSERVICES1,288
- EMIRATES-INTERNET Emirates Internet1,271
- PHILIPP-MORIS-TRETTIN881
- MITEFLUX-AS429
- PUBLIC-DOMAIN-REGISTRY259
- DU-AS1229