Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Top 10 Reports - SANS Internet Storm Center

SANS Site Network

Current Site

SANS Internet Storm Center

Other SANS Sites Help

Graduate Degree Programs

Security Training

Security Certification

Security Awareness Training

Penetration Testing

Industrial Control Systems

Cyber Defense Foundations

DFIR

Software Security

Government OnSite Training

Top 10 Reports

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Log In or Sign Up for Free!

Top 10 Ports

by Reports

by Targets

by Sources

Port	Reports
22	65934
2222	36211
53	35439
80	30082
23	29788
33434	12510
1025	9368
6379	7293
25	6485
443	6223

Port	Targets
23	2996
22	1301
53	912
8080	848
3389	803
80	797
443	793
5555	754
81	661
8443	585

Port	Sources
23	7811
22	2524
445	2145
2222	1724
80	1576
8080	1490
1433	1249
6379	1160
2323	973
5555	889

View Port Report Page

Top 10 Source IPs

IP Address	Reports	Target IPs	First Seen	Last Seen
045.155.204.105 (RU)	384,705	16,194	2022-04-27	2022-05-28
146.088.240.004 (US)	406,143	14,544	2021-07-27	2022-05-28
185.191.034.091 (RU)	328,843	14,065	2022-04-23	2022-05-28
031.043.191.143 (UA)	434,149	14,053	2022-04-19	2022-05-28
089.248.174.144 (GB)	396,454	13,688	2022-04-28	2022-05-28
045.093.016.033 (HK)	291,552	13,204	2022-04-01	2022-05-28
045.154.096.076 (BE)	230,498	12,815	2022-04-25	2022-05-28
045.155.205.044 (RU)	239,410	12,762	2021-12-27	2022-05-28
045.155.205.042 (RU)	241,867	12,728	2021-12-27	2022-05-28
045.155.205.046 (RU)	238,589	12,682	2022-03-24	2022-05-28

View Top Sources Page

Apply the Top 10 blocklist automatically to your firewall via ThreatSTOP.