Attack traffic from Egypt

Honeypot telemetry for sources geolocated to Egypt

Observed by OffSeq honeypot sensors · last 30 days · last seen 3 minutes ago · first observed 2026-09-25 (29 days ago)

75,951

Attacks

167

Distinct source IPs

Attack traffic is led by RAYA-AS.

OffSeq honeypot sensors recorded 75,951 attacks from 167 distinct hosts geolocated to Egyptin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force74,333
T1021.005 VNC558
T1210 Exploitation of Remote Services319
T1187 Forced Authentication89
T1190 Exploit Public-Facing Application56
T1595 Active Scanning12
T1046 Network Service Discovery6
T1552 Unsecured Credentials4
T1059 Command and Scripting Interpreter2

Top networks (ASNs)

RAYA-AS41,763
TE-AS TE-AS33,359
LINKdotNET-AS776
VPN Consumer New Jersey13
SpaceX Services12

Open the live view → Get this in real time →