Attack traffic from Jordan

Honeypot telemetry for sources geolocated to Jordan

Observed by OffSeq honeypot sensors · last 30 days · last seen 6 hours ago · first observed 2026-09-26 (28 days ago)

6,969

Attacks

Distinct source IPs

KEV exploit hits

Attack traffic is led by BAT-AS9038.

OffSeq honeypot sensors recorded 6,969 attacks from 42 distinct hosts geolocated to Jordanin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force6,873
T1190 Exploit Public-Facing Application37
T1210 Exploitation of Remote Services17
T1046 Network Service Discovery14
T1595 Active Scanning10
T1595.002 Vulnerability Scanning5
T1552 Unsecured Credentials5
T1078 Valid Accounts2

Top networks (ASNs)

BAT-AS90386,883
OVH14

Open the live view → Get this in real time →