Threat Report, March 2016
Below is a summary of the Hacking Insider threat report for March 2016. This is taken from a collection of seven Honeypots located in Europe, Ireland. The data below is summarised from 834 attacks that have taken place between 2:25pm on the 25th of March 2016 to 2:14pm on the 28th of March 2016.
The above diagram depicts the location and intensity of attacks split into country codes. From this we have been able to gather that the three top countries for attacks against these honeypots were:
- United States Of America
- The Netherlands
The above diagram also depicts the most active IP addresses connecting to the servers. These IP addresses also originated from China and the Netherlands.
Finally each of these sensors has SNORT installed. The above diagram shows the most common SNORT signatures fired during this time frame across all of the sensors.
Image source: Pixabay.com