Red Piranha Threat Intelligence Report (27th August - 2nd Sep 2017)


Top 10 Attacker Countries

The following data states the extent of attacks that have originated from various countries.

The following data states the extent of attacks that have originated from various countries.

The following figure shows the extent of attacks that have originated from various countries.

Top 10 Attacker Host

The following data states the extent of attacks that have originated from specific host IP address.

The following data states the extent of attacks that have originated from specific host IP address.

The following figure shows the extent of attacks that have originated from specific host IP address.

Detailed Report on Suspicious Hosts:

Behavior: Scanning hosts

Activity: Continuously using different username password combination existing and non existing usernames.

We have found following different types of events:

SSHD authentication failed.
Multiple SSHD authentication failures.
Multiple failed logins in a small period of time.
SSH insecure connection attempt (scan).
Failed Password
Invalid User

Input userauth request invalid user

Type of attack: Bruteforce

Source IP Addresses:

218.87.109.152
58.218.198.171
5.101.40.10
103.31.80.190
181.176.181.150
213.159.63.112
77.72.82.183
113.195.145.79
93.174.93.10
Details
Date Published
September 04, 2017