ATLAS Attack Report: Global VNC network scanning activity

Attack Report

Global VNC network scanning activity

View:
Activity
Sources

Output:
Print
XML
CSV

Activity (past 24 hours)

By Service

Key	Service	Attacks per subnet	Percentage
	TCP/5901	13.05	40.1%
	TCP/5900	11.74	36.1%
	TCP/5902	0.98	3.0%
	TCP/5908	0.85	2.6%
	TCP/5906	0.85	2.6%
	TCP/5903	0.85	2.6%
	TCP/5909	0.84	2.6%
	TCP/5904	0.84	2.6%
	TCP/5905	0.84	2.6%
	TCP/5910	0.84	2.6%
	Other	0.83	2.6%

Sources (past 24 hours)

By Country

Key	Country	Attacks per subnet	Percentage
	FR (France)	13.65	42.0%
	ZA (South Africa)	4.03	12.4%
	VE (Venezuela)	2.23	6.9%
	AR (Argentina)	1.92	5.9%
	ES (Spain)	1.79	5.5%
	MX (Mexico)	1.67	5.1%
	CO (Colombia)	1.10	3.4%
	US (United States)	1.05	3.2%
	IT (Italy)	0.63	1.9%
	GB (Great Britain)	0.48	1.5%
	Other	3.96	12.2%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS16276 (OVH)	13.58	41.8%
	AS29918 (IMPOL-ASN)	4.03	12.4%
	AS8048 (CANTV)	1.95	6.0%
	AS8151 (Uninet)	1.41	4.3%
	AS3352 (TELEFONICA-DATA-ESPANA)	1.09	3.4%
	AS22927 (Telefonica)	0.66	2.0%
	AS10318 (CABLEVISION)	0.55	1.7%
	AS3269 (ASN-IBSNAZ)	0.55	1.7%
	AS7303 (Telecom)	0.54	1.6%
	AS3816 (COLOMBIA)	0.48	1.5%
	Other	7.67	23.6%

By Host

Key	Host	Attacks per subnet	Percentage
	91.121.99.16 (ks28922.kimsufi.com)	5.70	17.5%
	91.121.155.216 (ks359148.kimsufi.com)	4.28	13.2%
	196.46.142.87	4.03	12.4%
	91.121.107.67 (ks354569.kimsufi.com)	2.76	8.5%
	88.59.53.106	0.52	1.6%
	74.222.191.154	0.35	1.1%
	91.121.156.190	0.31	0.9%
	213.186.46.65	0.28	0.9%
	24.232.166.193	0.26	0.8%
	201.209.124.97	0.19	0.6%
	Other	13.83	42.6%

Background

Description

VNC network scanning activity