Leurrecom.org Honeypot project
Select your language:
 
x xx xx xx x x x
x
 
x
x Welcome to the LEURRE.COM presentation web site x

This page presents a high level summary of some of the data collected from our distributed honeypots (the various platforms composing this worldwide honeynet are based on honeyd) during four periods of time. The clusters are ordered according to the amount of sources found in each cluster. The countries are ordered according to the amount of sources originating from each country. The domains are ordered according to the amount of sources belonging to each domain. The ports sequences are ordered according to the amount sources that have contacted each ports sequence. We remind you that the results presented in this page are based on the data collected on all the platforms active during the period under consideration. You can choose to see the information calculated over a period of one day, one week, four weeks (one month) or 24 weeks (one semester).

x Week - Month - Semester x
DAY
21/05/2005

Top 5 attacking clusters

More information
This map shows, per continent, which clusters contain most of the addresses located in that continent. In other words, it highlights which attack tools are mostly active in which continent and the differences that exist between continents with respect to the attacks mostly virulent in each of them.

Top 5 sequences of attacked ports

  • 135|
  • 445|
  • 445| 135|
  • 1433|
  • 1025|
More information
x
The size of each pie part represents the amount of sources, originating from a given region, that have been grouped into a given cluster. The so called “Unique” pie part indicate the total amount of numbers that are found in clusters that contain a single IP. The one entitled "Backscatter" represents the amount IP addresses that are likely victims of (D)Dos attacks. Last but not least, the one named "Others" represents all the other clusters not yet mentioned so far.

Top 5 attacking countries

  • UNITED STATES
  • CHINA
  • Serbia and Montenegro
  • GERMANY
  • JAPAN
More information

Top 5 attacking domains

  • Unknown
  • net
  • com
  • jp
  • de
More information

Region Amount of sources from all clusters ratio of the total amount of sources originating from a given region for all clusters over the total amount of sources originating from all regions for all clusters. Amount of sources from the top four attacking clusters ratio of the total amount of sources from the top attacking clusters over the total amount of sources from all clusters of the region
North America 787 23.1% 355 45.1%
South America 58 1.7% 24 41.4%
Europe 1316 38.7% 721 54.8%
Africa 49 1.4% 31 63.3%
Asia 1141 33.5% 350 30.7%
Oceania 53 1.6% 17 32.1%

This table shows some more detailed information about the results represented in the map

 x

x   x