Attack traffic from Uzbekistan

Honeypot telemetry for sources geolocated to Uzbekistan

Observed by OffSeq honeypot sensors · last 30 days · last seen 5 hours ago · first observed 2026-08-03 (30 days ago)

342

Attacks

Distinct source IPs

Attack traffic is led by UNITEL.

OffSeq honeypot sensors recorded 342 attacks from 87 distinct hosts geolocated to Uzbekistanin the last 30 days. Source addresses are aggregated to /16 networks — Mirage never publishes an individual attacker IP.

Techniques

T1110 Brute Force175
T1059 Command and Scripting Interpreter40
T1210 Exploitation of Remote Services12
T1595 Active Scanning11
T1595.002 Vulnerability Scanning8
T1090 Proxy3
T1105 Ingress Tool Transfer3
T1190 Exploit Public-Facing Application2
T1078 Valid Accounts2

Top networks (ASNs)

UNITEL51
BRM-AS38
ATURON --- Upstream: MCPK ---19
TOSHTELEQABUL-AS10
TTI-UA-AS2
QNET-VN-UA-AS2
NETKA TELEKOM LLC1
IPLUS LLC1
UZMOBILE branch of Uzbektelecom JSC1

Open the live view →