Trends
- China is on top of the list with 580 unique attackers (22.8%)
- Command and execution was the top exploit event of the week with 61% of occurrences
Top Attacker by Country
| Country | No. of Attackers | Percentage |
|---|---|---|
| China | 580 | 22.8% |
| United States | 552 | 21.7% |
| Brazil | 239 | 9.4% |
| Russian Federation | 183 | 7.2% |
| France | 124 | 4.9% |
| Republic of Korea | 95 | 3.7% |
| Netherlands | 94 | 3.7% |
| India | 85 | 3.3% |
| United Kingdom | 68 | 2.7% |
| Ukraine | 64 | 2.5% |
| Vietnam | 62 | 2.4% |
| Italy | 56 | 2.2% |
| Indonesia | 54 | 2.1% |
| Germany | 54 | 2.1% |
| Australia | 40 | 1.6% |
| Taiwan | 39 | 1.5% |
| Turkey | 33 | 1.3% |
| Poland | 31 | 1.2% |
| Hong Kong | 30 | 1.2% |
Threat Geolocation
Top Attacking Hosts
| Host | Occurrences |
|---|---|
| 20.1.174.54 | 54 |
| 193.201.224.158 | 15 |
| 185.94.111.1 | 12 |
| 94.102.49.123 | 10 |
| 71.6.202.198 | 9 |
| 94.102.63.27 | 8 |
Top Alarms
| Alarm | No. of Occurrences |
|---|---|
| OTX Indicators of Compromise - PULSE | 116 |
| Database Attack - Stored Process Access - Attack | 52 |
| Bruteforce Authentication - SSH | 48 |
| Attack Tool Detected - Attack | 2 |
Comparison from Previous Report
| Alarm | No. of Occurrences |
|---|---|
| OTX Indicators of Compromise - PULSE | 131 |
| Database Attack - Stored Process Access - Attack | 52 |
| Bruteforce Authentication - SSH | 50 |
| Attack Tool Detected - Attack | 15 |
| WebServer Attack - Attack | 2 |
| WebServer Attack - XSS | 1 |
Red Piranha - Open Threat Exchange
| Pulses Subscribed | Indicators | Last Updated | Number of Alarms | Number of Events |
|---|---|---|---|---|
| 5,905 | 881,249 | 2018-11-04 22:57:22 | 6,160 | 8,370 |
Vulnerabilities
Vuln: OpenSSL CVE-2018-0734 Side Channel Attack Information Disclosure Vulnerability
10/30/2018, 8:00:00 PM
OpenSSL CVE-2018-0734 Side Channel Attack Information Disclosure Vulnerability
Vuln: Mozilla Thunderbird MFSA2018-28 Multiple Security Vulnerabilities
10/30/2018, 8:00:00 PM
Mozilla Thunderbird MFSA2018-28 Multiple Security Vulnerabilities
Details
Category