Red Piranha Threat Intelligence Report - May 28 - June 4 '2018

TRENDS


  • The number of unique attackers from China decreased to 21.46% compared to last week.
  • Top Alarm was: Delivery & Attack - Bruteforce Authentication - SSH with 211 occurrences and decreased by almost 50% compared to the previous week. 


TOP ATTACKER COUNTRIES


Country No. of Attackers Percentage
China 309 21.46%
United States 303 21.04%
Russian Federation 92 6.39%
France 89 6.18%
Unknown 86 5.97%
Vietnam 85 5.90%
Brazil 74 5.14%
Republic of Korea 73 5.07%
India 57 3.96%
Indonesia 38 2.64%
Netherlands 35 2.43%
Germany 31 2.15%
Canada 26 1.81%
Italy 26 1.81%
Singapore 23 1.60%
Thailand 20 1.39%
United Kingdom 20 1.39%
Ukraine 20 1.39%
Japan 17 1.18%
Argentina 16 1.11%

Top Cyber Attackers by Country May 28-June 4 2018


THREAT GEOLOCATION


Cyber Security Threat Geolocations May 28 - June 4 2018


TOP ATTACKING HOSTS


Top Attacker Hosts May 28 - June 4 2018


TOP ATTACKING NETWORKS


Origin AS Announcement Description
AS44050 5.8.10.0/24 Petersburg Internet Network Ltd.
AS4134 58.208.0.0/12 CHINANET Jiangsu Province Network
AS29066 134.119.192.0/19 velia.net Internetdienste GmbH
AS6936 184.104.0.0/15 Hurricane Electric LLC
AS36375 141.212.0.0/16 University of Michigan


TOP ALARMS


 

Alarm No. of Occurrences
Delivery & Attack - Bruteforce Authentication - SSH 211
Environmental Awareness - OTX Indicators of Compromise - PULSE 155
Delivery & Attack - Bruteforce Authentication - Linux/Unix 190
Delivery & Attack - Bruteforce Authentication - Windows Login 5

                             

Comparison to the Previous Report

Alarm No. of Occurrences
Delivery & Attack - Bruteforce Authentication - SSH 408
Environmental Awareness - OTX Indicators of Compromise - PULSE 87
Delivery & Attack - Bruteforce Authentication - Linux/Unix 87
Delivery & Attack - Bruteforce Authentication - Windows Login 1
Delivery & Attack - WebServer Attack - SQL Injection - Attack Pattern Detection 1

Top Cyber Security Alarms May 28-June 4 2018
Details