Attack traffic from Ethiopia

Honeypot telemetry for sources geolocated to Ethiopia

Observed by OffSeq honeypot sensors · last 30 days · last seen 11 hours ago · first observed 2026-08-03 (30 days ago)

155

Attacks

Distinct source IPs

Attack traffic is led by EthioNet-AS.

OffSeq honeypot sensors recorded 155 attacks from 36 distinct hosts geolocated to Ethiopiain the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force36
T1595 Active Scanning26
T1059 Command and Scripting Interpreter12
T1090 Proxy12
T1046 Network Service Discovery8
T1210 Exploitation of Remote Services8
T1595.002 Vulnerability Scanning6
T1190 Exploit Public-Facing Application5
T1105 Ingress Tool Transfer1

Top networks (ASNs)

EthioNet-AS60

Open the live view →