This is a important difference, because if there is active DPI that is shutting down a connection before handshake can happen, it will inflate the numbers massively.
I suspect what actually is happening is a ISP in UAE has deployed a DPI system that can detect the Tor TLS signature