From 5129b0d796f872a9c4a70049ef193ab4e99dd2da Mon Sep 17 00:00:00 2001 From: David Gasquez Date: Tue, 7 Nov 2023 11:14:42 +0100 Subject: [PATCH] Add files via upload --- country-data.json | 1 + 1 file changed, 1 insertion(+) create mode 100644 country-data.json diff --git a/country-data.json b/country-data.json new file mode 100644 index 0000000..c170d06 --- /dev/null +++ b/country-data.json @@ -0,0 +1 @@ +{"United Kingdom":{"abbrev":"GB","incoming":{"count":563995,"query":"destination_country_code:GB spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":563995}],"spoofable":[{"spoofable":false,"count":563995}],"organizations":[{"organization":"National Internet Backbone","count":69353},{"organization":"CHINANET-BACKBONE","count":66219},{"organization":"CHINA UNICOM China169 Backbone","count":43363},{"organization":"Telecom Namibia","count":14606},{"organization":"TE-AS","count":14243},{"organization":"DigitalOcean, LLC","count":13046},{"organization":"Korea Telecom","count":9922},{"organization":"VNPT Corp","count":9918},{"organization":"Mahanagar Telephone Nigam Limited","count":9622},{"organization":"Amazon.com, Inc.","count":9469},{"organization":"Data Communication Business Group","count":8845},{"organization":"Shenzhen Tencent Computer Systems Company Limited","count":6423},{"organization":"Hathway IP Over Cable Internet","count":6415},{"organization":"Telecom Argentina S.A.","count":6394},{"organization":"Telecomunicaciones MOVILNET","count":5468},{"organization":"PJSC Rostelecom","count":5183},{"organization":"UNINET","count":4518},{"organization":"Claro S/A","count":4425},{"organization":"NTT Communications Corporation","count":4417},{"organization":"PT Telekomunikasi Indonesia","count":4236}],"actors":[{"actor":"Stretchoid","count":1954},{"actor":"PDRLabs.net","count":972},{"actor":"LeakIX","count":87},{"actor":"Recyber Project","count":46},{"actor":"XMCO.fr","count":14},{"actor":"NetWatch","count":1},{"actor":"Scanopticon","count":1}],"countries":[{"country":"China","count":136845},{"country":"India","count":104282},{"country":"United States","count":37470},{"country":"Brazil","count":29754},{"country":"Russia","count":19058},{"country":"Egypt","count":14706},{"country":"Namibia","count":14621},{"country":"South Korea","count":14587},{"country":"Vietnam","count":14322},{"country":"Taiwan","count":11841},{"country":"Venezuela","count":11211},{"country":"Japan","count":9856},{"country":"Argentina","count":9824},{"country":"Iran","count":8231},{"country":"Germany","count":7910},{"country":"Indonesia","count":6993},{"country":"Hong Kong","count":6229},{"country":"Singapore","count":5754},{"country":"Italy","count":5551},{"country":"Mexico","count":5382}],"source_countries":[{"country":"China","count":136845},{"country":"India","count":104282},{"country":"United States","count":37470},{"country":"Brazil","count":29754},{"country":"Russia","count":19058},{"country":"Egypt","count":14706},{"country":"Namibia","count":14621},{"country":"South Korea","count":14587},{"country":"Vietnam","count":14322},{"country":"Taiwan","count":11841},{"country":"Venezuela","count":11211},{"country":"Japan","count":9856},{"country":"Argentina","count":9824},{"country":"Iran","count":8231},{"country":"Germany","count":7910},{"country":"Indonesia","count":6993},{"country":"Hong Kong","count":6229},{"country":"Singapore","count":5754},{"country":"Italy","count":5551},{"country":"Mexico","count":5382}],"destination_countries":[{"country":"United Kingdom","count":563995},{"country":"United States","count":525977},{"country":"Spain","count":406603},{"country":"Ukraine","count":308900},{"country":"Belarus","count":285108},{"country":"Turkey","count":274671},{"country":"Israel","count":258675},{"country":"Indonesia","count":216899},{"country":"Singapore","count":175474},{"country":"China","count":164368},{"country":"Latvia","count":163867},{"country":"India","count":161587},{"country":"Germany","count":158027},{"country":"Taiwan","count":151792},{"country":"Canada","count":151198},{"country":"Brazil","count":145481},{"country":"Finland","count":145389},{"country":"Japan","count":126988},{"country":"Bulgaria","count":120954},{"country":"Netherlands","count":117654}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":374051},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":158788},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":134458},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":96230},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":92921},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":69545},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":39355},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":27522},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":24381},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":21242},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":19873},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":16495},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":12624},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":10566},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":8656},{"tag":"GPON CVE-2018-10561 Router Worm","id":"56cb92ac-8fd1-4b93-846c-c15918b5fb87","count":7887},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":6568},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":5824},{"tag":"Netgear DGN Command Execution","id":"994536ba-203a-4d25-9652-9e9850bf7864","count":5064},{"tag":"Cisco IMC Supervisor and UCS Director Backdoor","id":"5fedddae-5c7b-4d66-a993-434796ccd1c1","count":4994}],"operating_systems":[{"operating_system":"unknown","count":159112},{"operating_system":"Linux 2.2-3.x","count":146584},{"operating_system":"Linux 2.4.x","count":63268},{"operating_system":"Linux 3.11+","count":52747},{"operating_system":"Linux 3.1-3.10","count":38905},{"operating_system":"Linux 2.4-2.6","count":28689},{"operating_system":"Linux 3.x","count":27845},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":24510},{"operating_system":"Windows 7/8","count":10553},{"operating_system":"Windows 2000","count":5609},{"operating_system":"Linux 2.6","count":2968},{"operating_system":"Windows XP","count":2569},{"operating_system":"Mac OS X 10.x","count":211},{"operating_system":"Mac OS X","count":174},{"operating_system":"FreeBSD","count":139},{"operating_system":"Windows NT kernel 6.x","count":73},{"operating_system":"Linux (Android)","count":21},{"operating_system":"Linux 2.2.x","count":7},{"operating_system":"FreeBSD 8.x","count":5},{"operating_system":"Linux 2.0","count":2}],"categories":[{"category":"isp","count":456291},{"category":"hosting","count":62450},{"category":"mobile","count":25674},{"category":"business","count":18504},{"category":"education","count":1044},{"category":"inactive","count":5}],"asns":[{"asn":"AS9829","count":69353},{"asn":"AS4134","count":66219},{"asn":"AS4837","count":43363},{"asn":"AS36996","count":14606},{"asn":"AS8452","count":14243},{"asn":"AS14061","count":13046},{"asn":"AS4766","count":9922},{"asn":"AS45899","count":9918},{"asn":"AS17813","count":9622},{"asn":"AS3462","count":8845},{"asn":"AS14618","count":7097},{"asn":"AS45090","count":6423},{"asn":"AS17488","count":6415},{"asn":"AS7303","count":6394},{"asn":"AS27889","count":5468},{"asn":"AS12389","count":4675},{"asn":"AS8151","count":4518},{"asn":"AS22085","count":4423},{"asn":"AS4713","count":4417},{"asn":"AS7713","count":4236}]}},"incoming_only":{"count":17024,"query":"destination_country_code:GB spoofable:false single_destination:true classification:malicious","stats":{"classifications":[{"classification":"malicious","count":17024}],"spoofable":[{"spoofable":false,"count":17024}],"organizations":[{"organization":"National Internet Backbone","count":2295},{"organization":"TE-AS","count":1326},{"organization":"CHINANET-BACKBONE","count":1242},{"organization":"NTT Communications Corporation","count":587},{"organization":"TELEFÔNICA BRASIL S.A","count":440},{"organization":"DigitalOcean, LLC","count":427},{"organization":"CHINA UNICOM China169 Backbone","count":381},{"organization":"Korea Telecom","count":380},{"organization":"Iran Telecommunication Company PJS","count":322},{"organization":"VNPT Corp","count":234},{"organization":"M247 Europe SRL","count":223},{"organization":"PT Telekomunikasi Indonesia","count":184},{"organization":"TELEFONICA DE ESPANA S.A.U.","count":183},{"organization":"TalkTalk Communications Limited","count":180},{"organization":"Microsoft Corporation","count":167},{"organization":"HostRoyale Technologies Pvt Ltd","count":150},{"organization":"PJSC Rostelecom","count":147},{"organization":"Telecom Italia S.p.A.","count":146},{"organization":"Amazon.com, Inc.","count":141},{"organization":"Pakistan Telecommunication Company Limited","count":136}],"actors":{},"countries":[{"country":"India","count":2780},{"country":"China","count":2120},{"country":"Egypt","count":1394},{"country":"United States","count":1285},{"country":"Brazil","count":927},{"country":"Japan","count":877},{"country":"Iran","count":604},{"country":"South Korea","count":594},{"country":"Russia","count":543},{"country":"Vietnam","count":355},{"country":"Germany","count":299},{"country":"United Kingdom","count":258},{"country":"Singapore","count":257},{"country":"Venezuela","count":246},{"country":"Spain","count":245},{"country":"Indonesia","count":241},{"country":"Thailand","count":241},{"country":"Italy","count":218},{"country":"Taiwan","count":170},{"country":"Pakistan","count":166}],"source_countries":[{"country":"India","count":2780},{"country":"China","count":2120},{"country":"Egypt","count":1394},{"country":"United States","count":1285},{"country":"Brazil","count":927},{"country":"Japan","count":877},{"country":"Iran","count":604},{"country":"South Korea","count":594},{"country":"Russia","count":543},{"country":"Vietnam","count":355},{"country":"Germany","count":299},{"country":"United Kingdom","count":258},{"country":"Singapore","count":257},{"country":"Venezuela","count":246},{"country":"Spain","count":245},{"country":"Indonesia","count":241},{"country":"Thailand","count":241},{"country":"Italy","count":218},{"country":"Taiwan","count":170},{"country":"Pakistan","count":166}],"destination_countries":[{"country":"United Kingdom","count":17024}],"tags":[{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":5794},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":5364},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":4405},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":4016},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":3960},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":3180},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":1895},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":1114},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":492},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":347},{"tag":"RouterOS Bruteforcer","id":"c8424cf8-d29d-4a8f-9810-ecdc59b67e3e","count":291},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":249},{"tag":"Carries HTTP Referer","id":"79f609f0-4d07-455d-b9b1-56ff7c1a77a9","count":226},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":208},{"tag":"GPON CVE-2018-10561 Router Worm","id":"56cb92ac-8fd1-4b93-846c-c15918b5fb87","count":151},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":137},{"tag":"Netgear DGN Command Execution","id":"994536ba-203a-4d25-9652-9e9850bf7864","count":123},{"tag":"CGI Script Scanner","id":"feb92353-4264-44ce-8f7d-8ddae93719da","count":115},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":113},{"tag":"FiberHome Telnet Backdoor","id":"2ac49371-294c-428c-8dfd-a8890164f730","count":97}],"operating_systems":[{"operating_system":"unknown","count":17012},{"operating_system":"Linux 2.2-3.x","count":5},{"operating_system":"Linux 3.x","count":2},{"operating_system":"Windows 2000","count":2},{"operating_system":"Linux 2.4.x","count":1},{"operating_system":"Linux 3.1-3.10","count":1},{"operating_system":"Linux 3.11+","count":1}],"categories":[{"category":"isp","count":13331},{"category":"hosting","count":1833},{"category":"mobile","count":1202},{"category":"business","count":626},{"category":"education","count":32}],"asns":[{"asn":"AS9829","count":2295},{"asn":"AS8452","count":1326},{"asn":"AS4134","count":1242},{"asn":"AS4713","count":587},{"asn":"AS14061","count":427},{"asn":"AS26599","count":402},{"asn":"AS4837","count":381},{"asn":"AS4766","count":380},{"asn":"AS58224","count":322},{"asn":"AS45899","count":234},{"asn":"AS9009","count":223},{"asn":"AS7713","count":184},{"asn":"AS3352","count":183},{"asn":"AS8075","count":167},{"asn":"AS3269","count":144},{"asn":"AS17557","count":136},{"asn":"AS12389","count":134},{"asn":"AS13285","count":126},{"asn":"AS20473","count":115},{"asn":"AS26615","count":115}]}},"outgoing":{"count":8562,"query":"source_country_code:GB spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":8562}],"spoofable":[{"spoofable":false,"count":8562}],"organizations":[{"organization":"Hutchison 3G UK Limited","count":1864},{"organization":"TalkTalk Communications Limited","count":1462},{"organization":"Amazon.com, Inc.","count":1206},{"organization":"DigitalOcean, LLC","count":975},{"organization":"British Telecommunications PLC","count":625},{"organization":"OVH SAS","count":162},{"organization":"IPXO LIMITED","count":158},{"organization":"Virgin Media Limited","count":156},{"organization":"UK Dedicated Servers Limited","count":153},{"organization":"The Constant Company, LLC","count":130},{"organization":"AVAST Software s.r.o.","count":111},{"organization":"Akamai Connected Cloud","count":102},{"organization":"Microsoft Corporation","count":92},{"organization":"Sky UK Limited","count":77},{"organization":"Alibaba (US) Technology Co., Ltd.","count":64},{"organization":"Plusnet","count":61},{"organization":"Clouvider","count":56},{"organization":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED","count":54},{"organization":"IONOS SE","count":52},{"organization":"M247 Europe SRL","count":49}],"actors":[{"actor":"PDRLabs.net","count":1123},{"actor":"LeakIX","count":14}],"countries":[{"country":"United Kingdom","count":8562}],"source_countries":[{"country":"United Kingdom","count":8562}],"destination_countries":[{"country":"United States","count":6800},{"country":"United Kingdom","count":5115},{"country":"Spain","count":4441},{"country":"Ukraine","count":3637},{"country":"Israel","count":3353},{"country":"Turkey","count":3292},{"country":"Indonesia","count":3107},{"country":"Belarus","count":2955},{"country":"Singapore","count":2700},{"country":"India","count":2574},{"country":"Germany","count":2469},{"country":"Canada","count":2434},{"country":"Brazil","count":2327},{"country":"China","count":2309},{"country":"Finland","count":2228},{"country":"Latvia","count":2148},{"country":"Netherlands","count":2069},{"country":"Japan","count":2048},{"country":"Australia","count":1903},{"country":"France","count":1881}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":4109},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":2900},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":2150},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":1983},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":1524},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":1488},{"tag":"CGI Script Scanner","id":"feb92353-4264-44ce-8f7d-8ddae93719da","count":1149},{"tag":"Cisco ASA Scanner","id":"a562704a-31ac-45bb-bc89-5e52e3bebbaf","count":1124},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":1054},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":998},{"tag":"Citrix NetScaler LFI","id":"5a0cc1bc-aa9f-4b01-844b-beabb1f27b97","count":659},{"tag":"Sophos XG Firewall User Portal Scanner","id":"2bb02ff0-c4c5-400d-86ea-e87b7a127e77","count":652},{"tag":"Palo Alto Networks PAN-OS Crawler","id":"ed448a9f-636b-4baf-bfa8-a60940f7586d","count":651},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":498},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":409},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":291},{"tag":"PHPUnit RCE Attempt","id":"11af765c-69fd-4ad8-b1e2-f3572e1cf6c4","count":287},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":282},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":208},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":177}],"operating_systems":[{"operating_system":"unknown","count":3389},{"operating_system":"Linux 2.2-3.x","count":3277},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":670},{"operating_system":"Windows 2000","count":338},{"operating_system":"Linux 3.11+","count":293},{"operating_system":"Linux 3.1-3.10","count":230},{"operating_system":"Windows 7/8","count":109},{"operating_system":"Linux 3.x","count":84},{"operating_system":"Linux 2.4.x","count":71},{"operating_system":"Linux 2.4-2.6","count":42},{"operating_system":"Linux 2.6","count":36},{"operating_system":"Windows XP","count":16},{"operating_system":"FreeBSD","count":2},{"operating_system":"Mac OS X","count":2},{"operating_system":"Windows NT kernel 6.x","count":2},{"operating_system":"Mac OS X 10.x","count":1}],"categories":[{"category":"isp","count":4312},{"category":"hosting","count":3453},{"category":"mobile","count":602},{"category":"business","count":190},{"category":"education","count":4}],"asns":[{"asn":"AS206067","count":1864},{"asn":"AS16509","count":1206},{"asn":"AS14061","count":975},{"asn":"AS13285","count":956},{"asn":"AS2856","count":625},{"asn":"AS9105","count":506},{"asn":"AS16276","count":162},{"asn":"AS206092","count":158},{"asn":"AS5089","count":156},{"asn":"AS42831","count":153},{"asn":"AS20473","count":130},{"asn":"AS198605","count":111},{"asn":"AS63949","count":102},{"asn":"AS8075","count":92},{"asn":"AS5607","count":77},{"asn":"AS45102","count":64},{"asn":"AS6871","count":61},{"asn":"AS62240","count":56},{"asn":"AS135377","count":54},{"asn":"AS8560","count":52}]}}},"France":{"abbrev":"FR","incoming":{"count":111738,"query":"destination_country_code:FR spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":111738}],"spoofable":[{"spoofable":false,"count":111738}],"organizations":[{"organization":"CHINANET-BACKBONE","count":15888},{"organization":"DigitalOcean, LLC","count":7255},{"organization":"CHINA UNICOM China169 Backbone","count":6016},{"organization":"Korea Telecom","count":4891},{"organization":"National Internet Backbone","count":4617},{"organization":"Shenzhen Tencent Computer Systems Company Limited","count":4363},{"organization":"Amazon.com, Inc.","count":2143},{"organization":"Data Communication Business Group","count":1891},{"organization":"Tencent Building, Kejizhongyi Avenue","count":1881},{"organization":"Telecom Namibia","count":1486},{"organization":"Alibaba (US) Technology Co., Ltd.","count":1256},{"organization":"VNPT Corp","count":1203},{"organization":"Microsoft Corporation","count":910},{"organization":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED","count":781},{"organization":"China Mobile Communications Group Co., Ltd.","count":769},{"organization":"UNINET","count":747},{"organization":"Hangzhou Alibaba Advertising Co.,Ltd.","count":727},{"organization":"OVH SAS","count":705},{"organization":"TE-AS","count":702},{"organization":"Mahanagar Telephone Nigam Limited","count":686}],"actors":[{"actor":"Stretchoid","count":1952},{"actor":"PDRLabs.net","count":705},{"actor":"LeakIX","count":87},{"actor":"Recyber Project","count":39},{"actor":"XMCO.fr","count":14},{"actor":"Scanopticon","count":1}],"countries":[{"country":"China","count":31576},{"country":"United States","count":13098},{"country":"India","count":9624},{"country":"South Korea","count":6791},{"country":"Brazil","count":4290},{"country":"Russia","count":2974},{"country":"Singapore","count":2772},{"country":"Germany","count":2675},{"country":"Taiwan","count":2662},{"country":"Vietnam","count":2339},{"country":"Hong Kong","count":2328},{"country":"Japan","count":1900},{"country":"United Kingdom","count":1881},{"country":"Netherlands","count":1552},{"country":"Namibia","count":1495},{"country":"Italy","count":1134},{"country":"Indonesia","count":1098},{"country":"Mexico","count":1076},{"country":"Argentina","count":1060},{"country":"Iran","count":1056}],"source_countries":[{"country":"China","count":31576},{"country":"United States","count":13098},{"country":"India","count":9624},{"country":"South Korea","count":6791},{"country":"Brazil","count":4290},{"country":"Russia","count":2974},{"country":"Singapore","count":2772},{"country":"Germany","count":2675},{"country":"Taiwan","count":2662},{"country":"Vietnam","count":2339},{"country":"Hong Kong","count":2328},{"country":"Japan","count":1900},{"country":"United Kingdom","count":1881},{"country":"Netherlands","count":1552},{"country":"Namibia","count":1495},{"country":"Italy","count":1134},{"country":"Indonesia","count":1098},{"country":"Mexico","count":1076},{"country":"Argentina","count":1060},{"country":"Iran","count":1056}],"destination_countries":[{"country":"France","count":111738},{"country":"United States","count":109338},{"country":"United Kingdom","count":102710},{"country":"Spain","count":96082},{"country":"Ukraine","count":91778},{"country":"Israel","count":86841},{"country":"Turkey","count":86141},{"country":"Indonesia","count":82971},{"country":"Belarus","count":79710},{"country":"Singapore","count":77964},{"country":"India","count":75209},{"country":"Germany","count":74478},{"country":"Canada","count":72821},{"country":"Latvia","count":72780},{"country":"Brazil","count":71150},{"country":"Taiwan","count":70868},{"country":"China","count":70181},{"country":"Finland","count":69459},{"country":"Japan","count":67113},{"country":"Netherlands","count":63588}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":57652},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":42910},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":26603},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":26275},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":17274},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":14882},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":12575},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":11068},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":10290},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":6634},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":5131},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":4926},{"tag":"Cisco IMC Supervisor and UCS Director Backdoor","id":"5fedddae-5c7b-4d66-a993-434796ccd1c1","count":4613},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":4032},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":3503},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":2640},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":2478},{"tag":"JRMI Scanner","id":"c849922e-bb9c-412e-a819-6999ab8ad862","count":2237},{"tag":"SMBv2 Crawler","id":"d768ec7c-fb40-4ceb-aa3d-5a7181c3fa87","count":2139},{"tag":"X Server Connection Attempt","id":"6c79246a-c56e-4dfa-85a8-b5239ade7f02","count":1948}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":44811},{"operating_system":"Linux 3.11+","count":17373},{"operating_system":"unknown","count":14203},{"operating_system":"Linux 2.4.x","count":8520},{"operating_system":"Linux 3.1-3.10","count":8246},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":4690},{"operating_system":"Windows 7/8","count":3110},{"operating_system":"Linux 3.x","count":3081},{"operating_system":"Windows 2000","count":2889},{"operating_system":"Linux 2.4-2.6","count":2852},{"operating_system":"Linux 2.6","count":891},{"operating_system":"Windows XP","count":851},{"operating_system":"Mac OS X 10.x","count":93},{"operating_system":"Mac OS X","count":56},{"operating_system":"Windows NT kernel 6.x","count":33},{"operating_system":"FreeBSD","count":30},{"operating_system":"Linux (Android)","count":3},{"operating_system":"Linux 2.2.x","count":3},{"operating_system":"FreeBSD 8.x","count":1},{"operating_system":"Linux 2.0","count":1}],"categories":[{"category":"isp","count":74536},{"category":"hosting","count":28754},{"category":"business","count":5647},{"category":"mobile","count":2421},{"category":"education","count":371},{"category":"inactive","count":1}],"asns":[{"asn":"AS4134","count":15888},{"asn":"AS14061","count":7255},{"asn":"AS4837","count":6016},{"asn":"AS4766","count":4891},{"asn":"AS9829","count":4617},{"asn":"AS45090","count":4363},{"asn":"AS3462","count":1891},{"asn":"AS132203","count":1881},{"asn":"AS36996","count":1486},{"asn":"AS45102","count":1256},{"asn":"AS45899","count":1203},{"asn":"AS16509","count":1153},{"asn":"AS14618","count":990},{"asn":"AS8075","count":908},{"asn":"AS135377","count":781},{"asn":"AS9808","count":769},{"asn":"AS8151","count":747},{"asn":"AS37963","count":727},{"asn":"AS16276","count":705},{"asn":"AS8452","count":702}]}},"incoming_only":{"count":1251,"query":"destination_country_code:FR spoofable:false single_destination:true classification:malicious","stats":{"classifications":[{"classification":"malicious","count":1251}],"spoofable":[{"spoofable":false,"count":1251}],"organizations":[{"organization":"TE-AS","count":90},{"organization":"Microsoft Corporation","count":80},{"organization":"Amazon.com, Inc.","count":55},{"organization":"National Internet Backbone","count":54},{"organization":"CHINANET-BACKBONE","count":37},{"organization":"China Mobile Communications Group Co., Ltd.","count":28},{"organization":"Telecomunicaciones MOVILNET","count":27},{"organization":"UK Dedicated Servers Limited","count":27},{"organization":"Claro NXT Telecomunicacoes Ltda","count":25},{"organization":"V tal","count":25},{"organization":"TELEFÔNICA BRASIL S.A","count":22},{"organization":"UNINET","count":22},{"organization":"Pakistan Telecommunication Company Limited","count":19},{"organization":"NTT Communications Corporation","count":11},{"organization":"CHINA UNICOM China169 Backbone","count":10},{"organization":"Claro S/A","count":10},{"organization":"Iran Telecommunication Company PJS","count":10},{"organization":"PJSC Rostelecom","count":10},{"organization":"Telecom Argentina S.A.","count":9},{"organization":"CANTV Servicios, Venezuela","count":8}],"actors":[{"actor":"PDRLabs.net","count":1}],"countries":[{"country":"Brazil","count":257},{"country":"United States","count":146},{"country":"Egypt","count":91},{"country":"China","count":85},{"country":"India","count":72},{"country":"United Kingdom","count":43},{"country":"Venezuela","count":38},{"country":"Japan","count":33},{"country":"Mexico","count":32},{"country":"Russia","count":30},{"country":"Germany","count":27},{"country":"Argentina","count":23},{"country":"Indonesia","count":22},{"country":"Iran","count":21},{"country":"Pakistan","count":20},{"country":"Spain","count":15},{"country":"Ukraine","count":15},{"country":"Hong Kong","count":14},{"country":"France","count":12},{"country":"Vietnam","count":12}],"source_countries":[{"country":"Brazil","count":257},{"country":"United States","count":146},{"country":"Egypt","count":91},{"country":"China","count":85},{"country":"India","count":72},{"country":"United Kingdom","count":43},{"country":"Venezuela","count":38},{"country":"Japan","count":33},{"country":"Mexico","count":32},{"country":"Russia","count":30},{"country":"Germany","count":27},{"country":"Argentina","count":23},{"country":"Indonesia","count":22},{"country":"Iran","count":21},{"country":"Pakistan","count":20},{"country":"Spain","count":15},{"country":"Ukraine","count":15},{"country":"Hong Kong","count":14},{"country":"France","count":12},{"country":"Vietnam","count":12}],"destination_countries":[{"country":"France","count":1251}],"tags":[{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":479},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":453},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":209},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":140},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":124},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":106},{"tag":"Nmap","id":"1abb3207-bf1d-4ecc-8b3d-087f68729128","count":74},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":54},{"tag":"HTTP PUT Uploader","id":"d32ee0a8-3b1e-4fb2-ba62-4925c21b3f1f","count":47},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":43},{"tag":"Carries HTTP Referer","id":"79f609f0-4d07-455d-b9b1-56ff7c1a77a9","count":27},{"tag":"Generic Outlook Web Access Crawler","id":"c4d12a33-dc39-4d6c-9c04-e971a93c68e2","count":26},{"tag":"ProxyLogon SSRF Vuln Check","id":"809d19ba-35ec-44f1-af51-364eb4ead788","count":26},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":23},{"tag":"Apache Log4j RCE Attempt","id":"80592a05-bbd6-4813-836d-9ef9f822e951","count":22},{"tag":"Contains Well-known Out-of-band Interaction Domain","id":"973c9324-b548-4d80-8c46-57a0d5c39c8c","count":22},{"tag":"SOCKS5 Proxy Scanner","id":"553b5765-6241-4e9a-9982-0ca113796134","count":19},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":15},{"tag":"PHPUnit RCE Attempt","id":"11af765c-69fd-4ad8-b1e2-f3572e1cf6c4","count":15},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":14}],"operating_systems":[{"operating_system":"unknown","count":1244},{"operating_system":"Linux 2.2-3.x","count":4},{"operating_system":"Windows 2000","count":2},{"operating_system":"Linux 3.1-3.10","count":1}],"categories":[{"category":"isp","count":850},{"category":"hosting","count":158},{"category":"business","count":143},{"category":"mobile","count":99},{"category":"education","count":1}],"asns":[{"asn":"AS8452","count":90},{"asn":"AS8075","count":80},{"asn":"AS9829","count":54},{"asn":"AS4134","count":37},{"asn":"AS14618","count":29},{"asn":"AS9808","count":28},{"asn":"AS27889","count":27},{"asn":"AS42831","count":27},{"asn":"AS16509","count":26},{"asn":"AS28573","count":25},{"asn":"AS8151","count":22},{"asn":"AS17557","count":19},{"asn":"AS7738","count":16},{"asn":"AS26599","count":14},{"asn":"AS12389","count":11},{"asn":"AS4713","count":11},{"asn":"AS22085","count":10},{"asn":"AS58224","count":10},{"asn":"AS4837","count":9},{"asn":"AS7303","count":9}]}},"outgoing":{"count":3802,"query":"source_country_code:FR spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":3802}],"spoofable":[{"spoofable":false,"count":3802}],"organizations":[{"organization":"OVH SAS","count":775},{"organization":"Orange S.A.","count":585},{"organization":"Free SAS","count":280},{"organization":"Bouygues Telecom SA","count":271},{"organization":"Societe Francaise Du Radiotelephone - SFR SA","count":254},{"organization":"SCALEWAY S.A.S.","count":222},{"organization":"Amazon.com, Inc.","count":181},{"organization":"IPXO LIMITED","count":117},{"organization":"Microsoft Corporation","count":101},{"organization":"Host Europe GmbH","count":92},{"organization":"The Constant Company, LLC","count":84},{"organization":"CGI GLOBAL LIMITED","count":66},{"organization":"Akamai Connected Cloud","count":61},{"organization":"Datacamp Limited","count":46},{"organization":"Harmony Hosting SARL","count":44},{"organization":"M247 Europe SRL","count":36},{"organization":"Dyjix SAS","count":26},{"organization":"12651980 CANADA INC.","count":25},{"organization":"AEZA INTERNATIONAL LTD","count":24},{"organization":"Sapinet SAS","count":22}],"actors":{},"countries":[{"country":"France","count":3802}],"source_countries":[{"country":"France","count":3802}],"destination_countries":[{"country":"United States","count":3134},{"country":"United Kingdom","count":2431},{"country":"Spain","count":1965},{"country":"Ukraine","count":1843},{"country":"Israel","count":1688},{"country":"Turkey","count":1675},{"country":"Belarus","count":1616},{"country":"Indonesia","count":1452},{"country":"Singapore","count":1452},{"country":"India","count":1359},{"country":"Germany","count":1311},{"country":"Canada","count":1275},{"country":"Brazil","count":1192},{"country":"China","count":1182},{"country":"Latvia","count":1176},{"country":"Finland","count":1146},{"country":"Taiwan","count":1140},{"country":"Japan","count":1079},{"country":"Netherlands","count":1027},{"country":"Australia","count":1000}],"tags":[{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":1673},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":1165},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":1058},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":833},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":431},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":386},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":381},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":322},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":264},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":206},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":197},{"tag":"Python Requests Client","id":"788eb4be-0ffc-438d-92d6-d700df4fef72","count":181},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":178},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":155},{"tag":"Git Config Crawler","id":"c536e78c-7206-47e9-90f3-6e4302444185","count":151},{"tag":"PHPUnit RCE Attempt","id":"11af765c-69fd-4ad8-b1e2-f3572e1cf6c4","count":129},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":110},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":107},{"tag":"Cisco IMC Supervisor and UCS Director Backdoor","id":"5fedddae-5c7b-4d66-a993-434796ccd1c1","count":98},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":86}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":1430},{"operating_system":"unknown","count":1247},{"operating_system":"Windows 2000","count":294},{"operating_system":"Linux 3.11+","count":292},{"operating_system":"Linux 3.1-3.10","count":131},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":103},{"operating_system":"Linux 2.4.x","count":101},{"operating_system":"Windows 7/8","count":92},{"operating_system":"Linux 3.x","count":42},{"operating_system":"Windows XP","count":33},{"operating_system":"Linux 2.6","count":22},{"operating_system":"FreeBSD","count":6},{"operating_system":"Linux 2.4-2.6","count":5},{"operating_system":"Mac OS X","count":3},{"operating_system":"Windows NT kernel 6.x","count":1}],"categories":[{"category":"hosting","count":1896},{"category":"isp","count":1680},{"category":"business","count":177},{"category":"mobile","count":43},{"category":"education","count":6}],"asns":[{"asn":"AS16276","count":771},{"asn":"AS3215","count":574},{"asn":"AS12322","count":280},{"asn":"AS5410","count":271},{"asn":"AS15557","count":252},{"asn":"AS12876","count":222},{"asn":"AS16509","count":181},{"asn":"AS206092","count":117},{"asn":"AS8075","count":101},{"asn":"AS20473","count":84},{"asn":"AS56971","count":66},{"asn":"AS63949","count":61},{"asn":"AS34534","count":40},{"asn":"AS21499","count":39},{"asn":"AS29066","count":39},{"asn":"AS9009","count":36},{"asn":"AS210644","count":27},{"asn":"AS212815","count":26},{"asn":"AS399486","count":25},{"asn":"AS60068","count":23}]}}},"Spain":{"abbrev":"ES","incoming":{"count":472152,"query":"destination_country_code:ES spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":472152}],"spoofable":[{"spoofable":false,"count":472152}],"organizations":[{"organization":"National Internet Backbone","count":60549},{"organization":"CHINANET-BACKBONE","count":56436},{"organization":"CHINA UNICOM China169 Backbone","count":34734},{"organization":"Telecom Namibia","count":14313},{"organization":"DigitalOcean, LLC","count":11799},{"organization":"TE-AS","count":10358},{"organization":"Korea Telecom","count":9246},{"organization":"Mahanagar Telephone Nigam Limited","count":9062},{"organization":"Data Communication Business Group","count":8023},{"organization":"VNPT Corp","count":7800},{"organization":"Shenzhen Tencent Computer Systems Company Limited","count":6209},{"organization":"Telecom Argentina S.A.","count":5970},{"organization":"Hathway IP Over Cable Internet","count":5901},{"organization":"Amazon.com, Inc.","count":5200},{"organization":"PJSC Rostelecom","count":4071},{"organization":"Claro S/A","count":4027},{"organization":"Telecomunicaciones MOVILNET","count":4011},{"organization":"UNINET","count":3935},{"organization":"UNIFIQUE TELECOMUNICACOES S/A","count":3729},{"organization":"NTT Communications Corporation","count":3496}],"actors":[{"actor":"Stretchoid","count":1946},{"actor":"PDRLabs.net","count":1063},{"actor":"Recyber Project","count":34},{"actor":"XMCO.fr","count":14},{"actor":"NetWatch","count":1},{"actor":"Scanopticon","count":1}],"countries":[{"country":"China","count":114304},{"country":"India","count":91964},{"country":"United States","count":28060},{"country":"Brazil","count":26187},{"country":"Russia","count":15637},{"country":"Namibia","count":14326},{"country":"South Korea","count":13485},{"country":"Vietnam","count":11291},{"country":"Taiwan","count":10723},{"country":"Egypt","count":10591},{"country":"Argentina","count":8774},{"country":"Venezuela","count":8597},{"country":"Japan","count":8247},{"country":"Germany","count":6502},{"country":"Iran","count":6191},{"country":"Indonesia","count":5581},{"country":"Hong Kong","count":5386},{"country":"Italy","count":4717},{"country":"Mexico","count":4655},{"country":"Singapore","count":4591}],"source_countries":[{"country":"China","count":114304},{"country":"India","count":91964},{"country":"United States","count":28060},{"country":"Brazil","count":26187},{"country":"Russia","count":15637},{"country":"Namibia","count":14326},{"country":"South Korea","count":13485},{"country":"Vietnam","count":11291},{"country":"Taiwan","count":10723},{"country":"Egypt","count":10591},{"country":"Argentina","count":8774},{"country":"Venezuela","count":8597},{"country":"Japan","count":8247},{"country":"Germany","count":6502},{"country":"Iran","count":6191},{"country":"Indonesia","count":5581},{"country":"Hong Kong","count":5386},{"country":"Italy","count":4717},{"country":"Mexico","count":4655},{"country":"Singapore","count":4591}],"destination_countries":[{"country":"Spain","count":472152},{"country":"United States","count":460351},{"country":"United Kingdom","count":406603},{"country":"Ukraine","count":287250},{"country":"Belarus","count":264452},{"country":"Turkey","count":256726},{"country":"Israel","count":236344},{"country":"Indonesia","count":201896},{"country":"Singapore","count":161888},{"country":"Latvia","count":154148},{"country":"India","count":149235},{"country":"China","count":147028},{"country":"Germany","count":145534},{"country":"Taiwan","count":142293},{"country":"Canada","count":139887},{"country":"Brazil","count":136802},{"country":"Finland","count":133620},{"country":"Japan","count":118617},{"country":"Bulgaria","count":114849},{"country":"Netherlands","count":108943}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":341701},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":120946},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":101838},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":81577},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":77928},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":55275},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":25617},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":24732},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":23008},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":13582},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":13274},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":12425},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":8298},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":7932},{"tag":"GPON CVE-2018-10561 Router Worm","id":"56cb92ac-8fd1-4b93-846c-c15918b5fb87","count":7104},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":6011},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":6006},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":5839},{"tag":"Cisco IMC Supervisor and UCS Director Backdoor","id":"5fedddae-5c7b-4d66-a993-434796ccd1c1","count":4991},{"tag":"Netgear DGN Command Execution","id":"994536ba-203a-4d25-9652-9e9850bf7864","count":4456}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":133285},{"operating_system":"unknown","count":113208},{"operating_system":"Linux 2.4.x","count":59804},{"operating_system":"Linux 3.11+","count":39562},{"operating_system":"Linux 3.1-3.10","count":35684},{"operating_system":"Linux 2.4-2.6","count":26845},{"operating_system":"Linux 3.x","count":26349},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":22522},{"operating_system":"Windows 7/8","count":6952},{"operating_system":"Windows 2000","count":2975},{"operating_system":"Linux 2.6","count":2663},{"operating_system":"Windows XP","count":1940},{"operating_system":"Mac OS X 10.x","count":150},{"operating_system":"Mac OS X","count":111},{"operating_system":"FreeBSD","count":55},{"operating_system":"Windows NT kernel 6.x","count":33},{"operating_system":"Linux (Android)","count":8},{"operating_system":"FreeBSD 8.x","count":3},{"operating_system":"Linux 2.0","count":2},{"operating_system":"OpenBSD 4.x-5.x","count":1}],"categories":[{"category":"isp","count":385980},{"category":"hosting","count":49808},{"category":"mobile","count":20176},{"category":"business","count":15276},{"category":"education","count":889},{"category":"inactive","count":4}],"asns":[{"asn":"AS9829","count":60549},{"asn":"AS4134","count":56436},{"asn":"AS4837","count":34734},{"asn":"AS36996","count":14313},{"asn":"AS14061","count":11799},{"asn":"AS8452","count":10358},{"asn":"AS4766","count":9246},{"asn":"AS17813","count":9062},{"asn":"AS3462","count":8023},{"asn":"AS45899","count":7800},{"asn":"AS45090","count":6209},{"asn":"AS7303","count":5970},{"asn":"AS17488","count":5901},{"asn":"AS22085","count":4026},{"asn":"AS27889","count":4011},{"asn":"AS8151","count":3935},{"asn":"AS28343","count":3736},{"asn":"AS12389","count":3707},{"asn":"AS4713","count":3496},{"asn":"AS7713","count":3301}]}},"incoming_only":{"count":199,"query":"destination_country_code:ES spoofable:false single_destination:true classification:malicious","stats":{"classifications":[{"classification":"malicious","count":199}],"spoofable":[{"spoofable":false,"count":199}],"organizations":[{"organization":"CHINANET-BACKBONE","count":36},{"organization":"National Internet Backbone","count":26},{"organization":"TE-AS","count":8},{"organization":"CHINA UNICOM China169 Backbone","count":5},{"organization":"Iran Telecommunication Company PJS","count":5},{"organization":"PJSC Rostelecom","count":5},{"organization":"China Unicom Shanghai network","count":4},{"organization":"TELEFÔNICA BRASIL S.A","count":4},{"organization":"Telecom Italia S.p.A.","count":4},{"organization":"Telecomunicaciones MOVILNET","count":4},{"organization":"VNPT Corp","count":4},{"organization":"DigitalOcean, LLC","count":3},{"organization":"Nova Telecommunications & Media Single Member S.A","count":3},{"organization":"PT Telekomunikasi Indonesia","count":3},{"organization":"TELEFONICA DE ESPANA S.A.U.","count":3},{"organization":"TOT Public Company Limited","count":3},{"organization":"UNINET","count":3},{"organization":"1&1 Versatel Deutschland GmbH","count":2},{"organization":"Amazon.com, Inc.","count":2},{"organization":"BTT TELECOMUNICACOES S.A.","count":2}],"actors":{},"countries":[{"country":"China","count":50},{"country":"India","count":34},{"country":"Brazil","count":13},{"country":"United States","count":11},{"country":"Egypt","count":8},{"country":"Iran","count":8},{"country":"Russia","count":7},{"country":"Venezuela","count":7},{"country":"Germany","count":5},{"country":"Italy","count":5},{"country":"Thailand","count":5},{"country":"Argentina","count":4},{"country":"Indonesia","count":4},{"country":"Vietnam","count":4},{"country":"Greece","count":3},{"country":"Mexico","count":3},{"country":"Spain","count":3},{"country":"Chile","count":2},{"country":"Iraq","count":2},{"country":"Peru","count":2}],"source_countries":[{"country":"China","count":50},{"country":"India","count":34},{"country":"Brazil","count":13},{"country":"United States","count":11},{"country":"Egypt","count":8},{"country":"Iran","count":8},{"country":"Russia","count":7},{"country":"Venezuela","count":7},{"country":"Germany","count":5},{"country":"Italy","count":5},{"country":"Thailand","count":5},{"country":"Argentina","count":4},{"country":"Indonesia","count":4},{"country":"Vietnam","count":4},{"country":"Greece","count":3},{"country":"Mexico","count":3},{"country":"Spain","count":3},{"country":"Chile","count":2},{"country":"Iraq","count":2},{"country":"Peru","count":2}],"destination_countries":[{"country":"Spain","count":199}],"tags":[{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":85},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":84},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":80},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":58},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":36},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":7},{"tag":"Netgear DGN Command Execution","id":"994536ba-203a-4d25-9652-9e9850bf7864","count":6},{"tag":"FiberHome Telnet Backdoor","id":"2ac49371-294c-428c-8dfd-a8890164f730","count":5},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":5},{"tag":"CCTV-DVR RCE","id":"0cebf9a6-4611-4fa8-b67b-284b6dcb9dc4","count":4},{"tag":"GPON CVE-2018-10561 Router Worm","id":"56cb92ac-8fd1-4b93-846c-c15918b5fb87","count":4},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":4},{"tag":"CGI Script Scanner","id":"feb92353-4264-44ce-8f7d-8ddae93719da","count":3},{"tag":"NETGEAR Command Injection CVE-2016-6277","id":"562f4bfa-8876-42ee-b142-9d153f12767e","count":3},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":3},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":3},{"tag":"ADB Attempt","id":"db13a44a-515c-4eae-b905-2801b600674f","count":2},{"tag":"Supervisor XML-RPC RCE Attempt","id":"e5c58178-0678-4289-b9bc-a08404b7cdcb","count":2},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":2},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":2}],"operating_systems":[{"operating_system":"unknown","count":199}],"categories":[{"category":"isp","count":175},{"category":"mobile","count":15},{"category":"hosting","count":7},{"category":"business","count":1},{"category":"education","count":1}],"asns":[{"asn":"AS4134","count":36},{"asn":"AS9829","count":26},{"asn":"AS8452","count":8},{"asn":"AS12389","count":5},{"asn":"AS4837","count":5},{"asn":"AS58224","count":5},{"asn":"AS17621","count":4},{"asn":"AS26599","count":4},{"asn":"AS27889","count":4},{"asn":"AS3269","count":4},{"asn":"AS45899","count":4},{"asn":"AS14061","count":3},{"asn":"AS23969","count":3},{"asn":"AS3352","count":3},{"asn":"AS7713","count":3},{"asn":"AS8151","count":3},{"asn":"AS1241","count":2},{"asn":"AS131090","count":2},{"asn":"AS14618","count":2},{"asn":"AS16135","count":2}]}},"outgoing":{"count":7567,"query":"source_country_code:ES spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":7567}],"spoofable":[{"spoofable":false,"count":7567}],"organizations":[{"organization":"TELEFONICA DE ESPANA S.A.U.","count":4400},{"organization":"VODAFONE ESPANA S.A.U.","count":771},{"organization":"XTRA TELECOM S.A.","count":397},{"organization":"Orange Espagne SA","count":238},{"organization":"DIGI SPAIN TELECOM S.L.U.","count":196},{"organization":"AIRE NETWORKS DEL MEDITERRANEO SL UNIPERSONAL","count":131},{"organization":"AVATEL TELECOM, SA","count":87},{"organization":"VODAFONE ONO, S.A.","count":87},{"organization":"Euskaltel S.A.","count":72},{"organization":"IONOS SE","count":61},{"organization":"Innovaciones Tecnlogicas del Sur S.L.","count":60},{"organization":"R Cable y Telecable Telecomunicaciones, S.A.U.","count":59},{"organization":"Adamo Telecom Iberia S.A.","count":50},{"organization":"Fitel Network S.L.","count":44},{"organization":"The Constant Company, LLC","count":43},{"organization":"Cogent Communications","count":39},{"organization":"M247 Europe SRL","count":36},{"organization":"Datacamp Limited","count":28},{"organization":"Spotting Brands Technologies S.L","count":27},{"organization":"GARTEL, TELEFONIA Y COMUNICACION, S.L.","count":25}],"actors":{},"countries":[{"country":"Spain","count":7567}],"source_countries":[{"country":"Spain","count":7567}],"destination_countries":[{"country":"United States","count":5966},{"country":"United Kingdom","count":4435},{"country":"Spain","count":3421},{"country":"Ukraine","count":2417},{"country":"Belarus","count":2334},{"country":"Israel","count":2198},{"country":"Turkey","count":2120},{"country":"Indonesia","count":1623},{"country":"Singapore","count":1234},{"country":"Latvia","count":1143},{"country":"Germany","count":1112},{"country":"India","count":1104},{"country":"Finland","count":1030},{"country":"Canada","count":998},{"country":"Taiwan","count":985},{"country":"China","count":979},{"country":"Brazil","count":952},{"country":"Japan","count":763},{"country":"Netherlands","count":748},{"country":"Bulgaria","count":737}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":5406},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":1606},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":1336},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":982},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":930},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":904},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":659},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":169},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":165},{"tag":"ADB Attempt","id":"db13a44a-515c-4eae-b905-2801b600674f","count":125},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":95},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":72},{"tag":"Compromised Raspberry Pi","id":"91bc0299-3ff9-4a9a-9ab6-726ba501c9af","count":68},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":58},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":57},{"tag":"Looks Like Conficker","id":"ba9b892f-b089-41e7-8ade-72efbf32217c","count":56},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":50},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":47},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":35},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":32}],"operating_systems":[{"operating_system":"unknown","count":2962},{"operating_system":"Linux 2.4.x","count":1097},{"operating_system":"Linux 3.x","count":1031},{"operating_system":"Linux 2.2-3.x","count":1002},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":774},{"operating_system":"Linux 3.1-3.10","count":257},{"operating_system":"Linux 3.11+","count":118},{"operating_system":"Windows 2000","count":110},{"operating_system":"Linux 2.6","count":101},{"operating_system":"Windows 7/8","count":63},{"operating_system":"Windows XP","count":28},{"operating_system":"Linux 2.4-2.6","count":18},{"operating_system":"Windows NT kernel 6.x","count":6}],"categories":[{"category":"isp","count":6077},{"category":"mobile","count":1143},{"category":"hosting","count":283},{"category":"business","count":62},{"category":"education","count":1},{"category":"inactive","count":1}],"asns":[{"asn":"AS3352","count":4400},{"asn":"AS12430","count":766},{"asn":"AS15704","count":397},{"asn":"AS12479","count":205},{"asn":"AS57269","count":196},{"asn":"AS29119","count":128},{"asn":"AS6739","count":87},{"asn":"AS200845","count":80},{"asn":"AS12338","count":72},{"asn":"AS8560","count":61},{"asn":"AS60203","count":60},{"asn":"AS35699","count":50},{"asn":"AS205715","count":44},{"asn":"AS20473","count":43},{"asn":"AS12334","count":39},{"asn":"AS174","count":39},{"asn":"AS9009","count":36},{"asn":"AS12715","count":33},{"asn":"AS201234","count":27},{"asn":"AS206866","count":25}]}}},"Austrailia":{"abbrev":"AU","incoming":{"count":113513,"query":"destination_country_code:AU spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":113513}],"spoofable":[{"spoofable":false,"count":113513}],"organizations":[{"organization":"CHINANET-BACKBONE","count":15759},{"organization":"DigitalOcean, LLC","count":7396},{"organization":"CHINA UNICOM China169 Backbone","count":5983},{"organization":"Korea Telecom","count":5245},{"organization":"National Internet Backbone","count":4712},{"organization":"Shenzhen Tencent Computer Systems Company Limited","count":3936},{"organization":"Amazon.com, Inc.","count":2329},{"organization":"Data Communication Business Group","count":2198},{"organization":"Tencent Building, Kejizhongyi Avenue","count":1651},{"organization":"Telecom Namibia","count":1533},{"organization":"VNPT Corp","count":1220},{"organization":"Alibaba (US) Technology Co., Ltd.","count":1121},{"organization":"UNINET","count":945},{"organization":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED","count":774},{"organization":"Hangzhou Alibaba Advertising Co.,Ltd.","count":709},{"organization":"Microsoft Corporation","count":705},{"organization":"TE-AS","count":702},{"organization":"China Mobile Communications Group Co., Ltd.","count":682},{"organization":"OVH SAS","count":669},{"organization":"NTT Communications Corporation","count":659}],"actors":[{"actor":"Stretchoid","count":1954},{"actor":"PDRLabs.net","count":686},{"actor":"LeakIX","count":87},{"actor":"Recyber Project","count":43},{"actor":"XMCO.fr","count":14},{"actor":"Scanopticon","count":1}],"countries":[{"country":"China","count":30982},{"country":"United States","count":13257},{"country":"India","count":9835},{"country":"South Korea","count":7255},{"country":"Brazil","count":4432},{"country":"Taiwan","count":3015},{"country":"Russia","count":2923},{"country":"Singapore","count":2696},{"country":"Germany","count":2655},{"country":"Vietnam","count":2495},{"country":"Hong Kong","count":2105},{"country":"Japan","count":2008},{"country":"United Kingdom","count":1903},{"country":"Netherlands","count":1601},{"country":"Namibia","count":1538},{"country":"Mexico","count":1264},{"country":"Venezuela","count":1158},{"country":"Italy","count":1157},{"country":"Indonesia","count":1142},{"country":"Argentina","count":1062}],"source_countries":[{"country":"China","count":30982},{"country":"United States","count":13257},{"country":"India","count":9835},{"country":"South Korea","count":7255},{"country":"Brazil","count":4432},{"country":"Taiwan","count":3015},{"country":"Russia","count":2923},{"country":"Singapore","count":2696},{"country":"Germany","count":2655},{"country":"Vietnam","count":2495},{"country":"Hong Kong","count":2105},{"country":"Japan","count":2008},{"country":"United Kingdom","count":1903},{"country":"Netherlands","count":1601},{"country":"Namibia","count":1538},{"country":"Mexico","count":1264},{"country":"Venezuela","count":1158},{"country":"Italy","count":1157},{"country":"Indonesia","count":1142},{"country":"Argentina","count":1062}],"destination_countries":[{"country":"Australia","count":113513},{"country":"United States","count":111109},{"country":"United Kingdom","count":104774},{"country":"Spain","count":97601},{"country":"Ukraine","count":94041},{"country":"Israel","count":89062},{"country":"Turkey","count":85903},{"country":"Indonesia","count":84761},{"country":"Belarus","count":82676},{"country":"Singapore","count":79181},{"country":"India","count":77247},{"country":"Germany","count":76374},{"country":"Canada","count":75092},{"country":"Latvia","count":73810},{"country":"Brazil","count":73484},{"country":"Taiwan","count":72190},{"country":"Finland","count":71236},{"country":"China","count":69845},{"country":"Japan","count":68868},{"country":"Netherlands","count":64611}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":57077},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":43847},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":26655},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":26312},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":16912},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":15004},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":12283},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":10823},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":10248},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":8526},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":5127},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":4712},{"tag":"Cisco IMC Supervisor and UCS Director Backdoor","id":"5fedddae-5c7b-4d66-a993-434796ccd1c1","count":4535},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":3760},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":3286},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":2931},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":2435},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":2432},{"tag":"JRMI Scanner","id":"c849922e-bb9c-412e-a819-6999ab8ad862","count":2192},{"tag":"SMBv2 Crawler","id":"d768ec7c-fb40-4ceb-aa3d-5a7181c3fa87","count":2186}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":45314},{"operating_system":"Linux 3.11+","count":16388},{"operating_system":"unknown","count":13712},{"operating_system":"Linux 3.1-3.10","count":8701},{"operating_system":"Linux 2.4.x","count":8488},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":4941},{"operating_system":"Windows 7/8","count":4668},{"operating_system":"Windows 2000","count":3055},{"operating_system":"Linux 3.x","count":2980},{"operating_system":"Linux 2.4-2.6","count":2965},{"operating_system":"Windows XP","count":1239},{"operating_system":"Linux 2.6","count":854},{"operating_system":"Mac OS X 10.x","count":90},{"operating_system":"Mac OS X","count":41},{"operating_system":"FreeBSD","count":33},{"operating_system":"Windows NT kernel 6.x","count":32},{"operating_system":"Linux (Android)","count":6},{"operating_system":"FreeBSD 8.x","count":2},{"operating_system":"Linux 2.0","count":1},{"operating_system":"Linux 2.2.x","count":1}],"categories":[{"category":"isp","count":77015},{"category":"hosting","count":28063},{"category":"business","count":5489},{"category":"mobile","count":2544},{"category":"education","count":394},{"category":"inactive","count":1}],"asns":[{"asn":"AS4134","count":15759},{"asn":"AS14061","count":7396},{"asn":"AS4837","count":5983},{"asn":"AS4766","count":5245},{"asn":"AS9829","count":4712},{"asn":"AS45090","count":3936},{"asn":"AS3462","count":2198},{"asn":"AS132203","count":1651},{"asn":"AS36996","count":1533},{"asn":"AS45899","count":1220},{"asn":"AS16509","count":1171},{"asn":"AS14618","count":1158},{"asn":"AS45102","count":1121},{"asn":"AS8151","count":945},{"asn":"AS135377","count":774},{"asn":"AS37963","count":709},{"asn":"AS8075","count":704},{"asn":"AS8452","count":702},{"asn":"AS9808","count":682},{"asn":"AS16276","count":669}]}},"incoming_only":{"count":1044,"query":"destination_country_code:AU spoofable:false single_destination:true classification:malicious","stats":{"classifications":[{"classification":"malicious","count":1044}],"spoofable":[{"spoofable":false,"count":1044}],"organizations":[{"organization":"TE-AS","count":70},{"organization":"IPXO LIMITED","count":52},{"organization":"TELEFÔNICA BRASIL S.A","count":46},{"organization":"CHINA UNICOM China169 Backbone","count":43},{"organization":"Amazon.com, Inc.","count":41},{"organization":"National Internet Backbone","count":39},{"organization":"Claro NXT Telecomunicacoes Ltda","count":27},{"organization":"Airtek Solutions C.A.","count":24},{"organization":"Telecomunicaciones MOVILNET","count":23},{"organization":"V tal","count":23},{"organization":"CHINANET-BACKBONE","count":20},{"organization":"PJSC Rostelecom","count":12},{"organization":"Iran Telecommunication Company PJS","count":11},{"organization":"Pakistan Telecommunication Company Limited","count":11},{"organization":"BRISANET SERVICOS DE TELECOMUNICACOES S.A","count":8},{"organization":"TELEFONICA DE ESPANA S.A.U.","count":6},{"organization":"UNINET","count":6},{"organization":"VERO S.A","count":6},{"organization":"Bouygues Telecom SA","count":4},{"organization":"Cogent Communications","count":4}],"actors":{},"countries":[{"country":"Brazil","count":298},{"country":"United States","count":125},{"country":"China","count":72},{"country":"Egypt","count":70},{"country":"India","count":59},{"country":"Venezuela","count":53},{"country":"Russia","count":27},{"country":"Iran","count":22},{"country":"Mexico","count":19},{"country":"Argentina","count":18},{"country":"France","count":18},{"country":"Indonesia","count":17},{"country":"Germany","count":16},{"country":"Pakistan","count":14},{"country":"Turkey","count":13},{"country":"Spain","count":11},{"country":"United Kingdom","count":11},{"country":"Japan","count":10},{"country":"Italy","count":9},{"country":"Malaysia","count":9}],"source_countries":[{"country":"Brazil","count":298},{"country":"United States","count":125},{"country":"China","count":72},{"country":"Egypt","count":70},{"country":"India","count":59},{"country":"Venezuela","count":53},{"country":"Russia","count":27},{"country":"Iran","count":22},{"country":"Mexico","count":19},{"country":"Argentina","count":18},{"country":"France","count":18},{"country":"Indonesia","count":17},{"country":"Germany","count":16},{"country":"Pakistan","count":14},{"country":"Turkey","count":13},{"country":"Spain","count":11},{"country":"United Kingdom","count":11},{"country":"Japan","count":10},{"country":"Italy","count":9},{"country":"Malaysia","count":9}],"destination_countries":[{"country":"Australia","count":1044}],"tags":[{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":375},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":292},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":178},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":128},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":98},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":86},{"tag":"HTTP PUT Uploader","id":"d32ee0a8-3b1e-4fb2-ba62-4925c21b3f1f","count":50},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":48},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":45},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":42},{"tag":"PHPUnit RCE Attempt","id":"11af765c-69fd-4ad8-b1e2-f3572e1cf6c4","count":35},{"tag":"Apache Log4j RCE Attempt","id":"80592a05-bbd6-4813-836d-9ef9f822e951","count":30},{"tag":"Contains Well-known Out-of-band Interaction Domain","id":"973c9324-b548-4d80-8c46-57a0d5c39c8c","count":30},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":27},{"tag":"Git Config Crawler","id":"c536e78c-7206-47e9-90f3-6e4302444185","count":21},{"tag":"Python Requests Client","id":"788eb4be-0ffc-438d-92d6-d700df4fef72","count":18},{"tag":"robots.txt Scanner","id":"215d03ae-6899-49dd-9167-4c22fe1e832d","count":13},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":12},{"tag":"PHPMyAdmin Worm","id":"f7129e5c-b442-4af5-95cf-c6073a2b8443","count":11},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":10}],"operating_systems":[{"operating_system":"unknown","count":1041},{"operating_system":"Windows XP","count":2},{"operating_system":"Linux 3.1-3.10","count":1}],"categories":[{"category":"isp","count":804},{"category":"mobile","count":100},{"category":"hosting","count":83},{"category":"business","count":57}],"asns":[{"asn":"AS8452","count":70},{"asn":"AS206092","count":52},{"asn":"AS4837","count":43},{"asn":"AS9829","count":39},{"asn":"AS28573","count":27},{"asn":"AS61461","count":24},{"asn":"AS27889","count":23},{"asn":"AS26599","count":22},{"asn":"AS14618","count":21},{"asn":"AS16509","count":20},{"asn":"AS4134","count":20},{"asn":"AS27699","count":16},{"asn":"AS12389","count":12},{"asn":"AS17557","count":12},{"asn":"AS7738","count":12},{"asn":"AS58224","count":11},{"asn":"AS8167","count":9},{"asn":"AS28126","count":7},{"asn":"AS15557","count":6},{"asn":"AS18881","count":6}]}},"outgoing":{"count":4106,"query":"source_country_code:AU spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":4106}],"spoofable":[{"spoofable":false,"count":4106}],"organizations":[{"organization":"Telstra Corporation Ltd","count":1376},{"organization":"DigitalOcean, LLC","count":1052},{"organization":"TPG Telecom Limited","count":458},{"organization":"Wireline","count":148},{"organization":"Vocus Retail","count":139},{"organization":"The Constant Company, LLC","count":107},{"organization":"Amazon.com, Inc.","count":90},{"organization":"Microplex PTY LTD","count":89},{"organization":"Aussie Broadband","count":80},{"organization":"Microsoft Corporation","count":37},{"organization":"Oracle Corporation","count":36},{"organization":"Akamai Connected Cloud","count":35},{"organization":"OVH SAS","count":33},{"organization":"Vodafone Australia Pty Ltd","count":30},{"organization":"AAPT Limited","count":29},{"organization":"Southern Phone Company Ltd","count":29},{"organization":"Alibaba (US) Technology Co., Ltd.","count":23},{"organization":"Superloop","count":21},{"organization":"Exetel Pty Ltd","count":20},{"organization":"SOUL Converged Communications Australia","count":15}],"actors":[{"actor":"LeakIX","count":1}],"countries":[{"country":"Australia","count":4106}],"source_countries":[{"country":"Australia","count":4106}],"destination_countries":[{"country":"United States","count":3721},{"country":"United Kingdom","count":3170},{"country":"Spain","count":2708},{"country":"Ukraine","count":2038},{"country":"Belarus","count":2032},{"country":"Turkey","count":1942},{"country":"Israel","count":1807},{"country":"Indonesia","count":1623},{"country":"Singapore","count":1373},{"country":"India","count":1295},{"country":"Germany","count":1247},{"country":"Latvia","count":1228},{"country":"Canada","count":1203},{"country":"Brazil","count":1163},{"country":"Taiwan","count":1156},{"country":"Finland","count":1146},{"country":"China","count":1082},{"country":"Japan","count":1000},{"country":"Netherlands","count":878},{"country":"Bulgaria","count":830}],"tags":[{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":2557},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":1877},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":996},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":910},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":886},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":500},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":279},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":268},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":181},{"tag":"Git Config Crawler","id":"c536e78c-7206-47e9-90f3-6e4302444185","count":177},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":95},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":90},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":84},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":76},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":69},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":58},{"tag":"X Server Connection Attempt","id":"6c79246a-c56e-4dfa-85a8-b5239ade7f02","count":54},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":50},{"tag":"Radmin Crawler","id":"e23d491c-6abf-477b-9073-dd9879f46a98","count":50},{"tag":"IMAP Crawler","id":"beeb3978-32cc-408f-879a-91ceb783116e","count":47}],"operating_systems":[{"operating_system":"unknown","count":1373},{"operating_system":"Linux 2.2-3.x","count":1056},{"operating_system":"Linux 3.1-3.10","count":716},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":523},{"operating_system":"Linux 2.4.x","count":154},{"operating_system":"Linux 3.11+","count":116},{"operating_system":"Windows 2000","count":53},{"operating_system":"Linux 3.x","count":35},{"operating_system":"Windows 7/8","count":35},{"operating_system":"Linux 2.6","count":23},{"operating_system":"Linux 2.4-2.6","count":18},{"operating_system":"Windows XP","count":2},{"operating_system":"Mac OS X","count":1},{"operating_system":"Windows NT kernel 6.x","count":1}],"categories":[{"category":"isp","count":2366},{"category":"hosting","count":1448},{"category":"business","count":229},{"category":"mobile","count":63}],"asns":[{"asn":"AS1221","count":1376},{"asn":"AS14061","count":1052},{"asn":"AS7545","count":458},{"asn":"AS58507","count":148},{"asn":"AS9443","count":139},{"asn":"AS20473","count":107},{"asn":"AS16509","count":90},{"asn":"AS4804","count":89},{"asn":"AS4764","count":80},{"asn":"AS8075","count":37},{"asn":"AS31898","count":35},{"asn":"AS63949","count":35},{"asn":"AS16276","count":33},{"asn":"AS133612","count":30},{"asn":"AS136994","count":30},{"asn":"AS2764","count":29},{"asn":"AS45102","count":22},{"asn":"AS38195","count":21},{"asn":"AS10143","count":20},{"asn":"AS9942","count":15}]}}},"Canada":{"abbrev":"CA","incoming":{"count":170412,"query":"destination_country_code:CA spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":170412}],"spoofable":[{"spoofable":false,"count":170412}],"organizations":[{"organization":"CHINANET-BACKBONE","count":23490},{"organization":"CHINA UNICOM China169 Backbone","count":9881},{"organization":"National Internet Backbone","count":9609},{"organization":"DigitalOcean, LLC","count":8384},{"organization":"Korea Telecom","count":6236},{"organization":"Shenzhen Tencent Computer Systems Company Limited","count":4820},{"organization":"Amazon.com, Inc.","count":3213},{"organization":"Data Communication Business Group","count":3140},{"organization":"Telecom Namibia","count":2766},{"organization":"Tencent Building, Kejizhongyi Avenue","count":2021},{"organization":"VNPT Corp","count":1980},{"organization":"Alibaba (US) Technology Co., Ltd.","count":1573},{"organization":"TE-AS","count":1550},{"organization":"Mahanagar Telephone Nigam Limited","count":1330},{"organization":"UNINET","count":1327},{"organization":"PJSC Rostelecom","count":1307},{"organization":"Telecom International Myanmar Co., Ltd","count":1271},{"organization":"Telecom Argentina S.A.","count":1087},{"organization":"Hangzhou Alibaba Advertising Co.,Ltd.","count":1055},{"organization":"Iran Telecommunication Company PJS","count":1054}],"actors":[{"actor":"Stretchoid","count":1954},{"actor":"PDRLabs.net","count":832},{"actor":"LeakIX","count":87},{"actor":"Recyber Project","count":50},{"actor":"XMCO.fr","count":14},{"actor":"Scanopticon","count":1}],"countries":[{"country":"China","count":45286},{"country":"India","count":17571},{"country":"United States","count":17239},{"country":"South Korea","count":8652},{"country":"Brazil","count":7309},{"country":"Russia","count":5273},{"country":"Taiwan","count":4354},{"country":"Vietnam","count":3627},{"country":"Germany","count":3520},{"country":"Singapore","count":3424},{"country":"Japan","count":3029},{"country":"Hong Kong","count":2936},{"country":"Namibia","count":2772},{"country":"Iran","count":2721},{"country":"Myanmar","count":2523},{"country":"United Kingdom","count":2434},{"country":"Netherlands","count":1932},{"country":"Argentina","count":1784},{"country":"Venezuela","count":1766},{"country":"Mexico","count":1746}],"source_countries":[{"country":"China","count":45286},{"country":"India","count":17571},{"country":"United States","count":17239},{"country":"South Korea","count":8652},{"country":"Brazil","count":7309},{"country":"Russia","count":5273},{"country":"Taiwan","count":4354},{"country":"Vietnam","count":3627},{"country":"Germany","count":3520},{"country":"Singapore","count":3424},{"country":"Japan","count":3029},{"country":"Hong Kong","count":2936},{"country":"Namibia","count":2772},{"country":"Iran","count":2721},{"country":"Myanmar","count":2523},{"country":"United Kingdom","count":2434},{"country":"Netherlands","count":1932},{"country":"Argentina","count":1784},{"country":"Venezuela","count":1766},{"country":"Mexico","count":1746}],"destination_countries":[{"country":"Canada","count":170412},{"country":"United States","count":164271},{"country":"United Kingdom","count":151198},{"country":"Spain","count":139887},{"country":"Ukraine","count":129684},{"country":"Israel","count":120394},{"country":"Turkey","count":119549},{"country":"Belarus","count":113680},{"country":"Indonesia","count":113001},{"country":"Singapore","count":102841},{"country":"India","count":100122},{"country":"Germany","count":97975},{"country":"Latvia","count":95099},{"country":"Taiwan","count":92463},{"country":"Brazil","count":92072},{"country":"China","count":90195},{"country":"Finland","count":89679},{"country":"Japan","count":85744},{"country":"Netherlands","count":80344},{"country":"Bulgaria","count":78614}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":92459},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":62553},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":39596},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":34631},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":23986},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":18886},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":16871},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":13896},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":11702},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":9588},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":7302},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":5479},{"tag":"Cisco IMC Supervisor and UCS Director Backdoor","id":"5fedddae-5c7b-4d66-a993-434796ccd1c1","count":4803},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":4127},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":4029},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":3790},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":3460},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":3266},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":2730},{"tag":"JRMI Scanner","id":"c849922e-bb9c-412e-a819-6999ab8ad862","count":2601}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":67702},{"operating_system":"unknown","count":24105},{"operating_system":"Linux 3.11+","count":21330},{"operating_system":"Linux 2.4.x","count":14229},{"operating_system":"Linux 3.1-3.10","count":12947},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":7208},{"operating_system":"Linux 3.x","count":5326},{"operating_system":"Windows 7/8","count":5266},{"operating_system":"Linux 2.4-2.6","count":5141},{"operating_system":"Windows 2000","count":3911},{"operating_system":"Windows XP","count":1363},{"operating_system":"Linux 2.6","count":1217},{"operating_system":"Mac OS X","count":422},{"operating_system":"Mac OS X 10.x","count":142},{"operating_system":"FreeBSD","count":50},{"operating_system":"Windows NT kernel 6.x","count":33},{"operating_system":"Linux (Android)","count":10},{"operating_system":"Linux 2.2.x","count":4},{"operating_system":"FreeBSD 8.x","count":3},{"operating_system":"Linux 2.0","count":1}],"categories":[{"category":"isp","count":119595},{"category":"hosting","count":35338},{"category":"business","count":7612},{"category":"mobile","count":7372},{"category":"education","count":483},{"category":"inactive","count":2}],"asns":[{"asn":"AS4134","count":23490},{"asn":"AS4837","count":9881},{"asn":"AS9829","count":9609},{"asn":"AS14061","count":8384},{"asn":"AS4766","count":6236},{"asn":"AS45090","count":4820},{"asn":"AS3462","count":3140},{"asn":"AS36996","count":2766},{"asn":"AS132203","count":2021},{"asn":"AS45899","count":1980},{"asn":"AS14618","count":1792},{"asn":"AS45102","count":1573},{"asn":"AS8452","count":1550},{"asn":"AS16509","count":1421},{"asn":"AS17813","count":1330},{"asn":"AS8151","count":1327},{"asn":"AS136255","count":1271},{"asn":"AS12389","count":1133},{"asn":"AS7303","count":1087},{"asn":"AS37963","count":1055}]}},"incoming_only":{"count":3409,"query":"destination_country_code:CA spoofable:false single_destination:true classification:malicious","stats":{"classifications":[{"classification":"malicious","count":3409}],"spoofable":[{"spoofable":false,"count":3409}],"organizations":[{"organization":"Iran Telecommunication Company PJS","count":389},{"organization":"Iran Cell Service and Communication Company","count":314},{"organization":"TE-AS","count":237},{"organization":"National Internet Backbone","count":126},{"organization":"\"Rightel Communication Service Company PJS\"","count":124},{"organization":"Atom Myanmar Limited","count":114},{"organization":"Telecom International Myanmar Co., Ltd","count":94},{"organization":"PJSC Rostelecom","count":79},{"organization":"Asiatech Data Transmission company","count":57},{"organization":"MTS PJSC","count":57},{"organization":"Amazon.com, Inc.","count":53},{"organization":"CHINANET-BACKBONE","count":50},{"organization":"OOREDOO MYANMAR","count":48},{"organization":"Mobile Telecommunication Company Saudi Arabia Joint-Stock company","count":47},{"organization":"Telecomunicaciones MOVILNET","count":46},{"organization":"TELEFÔNICA BRASIL S.A","count":42},{"organization":"PJSC MegaFon","count":36},{"organization":"CHINA UNICOM China169 Backbone","count":30},{"organization":"PJSC \"Vimpelcom\"","count":30},{"organization":"Airtel Uganda Limited","count":28}],"actors":{},"countries":[{"country":"Iran","count":999},{"country":"Russia","count":353},{"country":"Myanmar","count":333},{"country":"Egypt","count":243},{"country":"Brazil","count":179},{"country":"India","count":147},{"country":"United States","count":130},{"country":"China","count":101},{"country":"Saudi Arabia","count":77},{"country":"Venezuela","count":55},{"country":"Germany","count":46},{"country":"Indonesia","count":40},{"country":"Japan","count":39},{"country":"Uganda","count":36},{"country":"United Arab Emirates","count":34},{"country":"Pakistan","count":30},{"country":"United Kingdom","count":30},{"country":"Turkey","count":26},{"country":"Spain","count":23},{"country":"Netherlands","count":20}],"source_countries":[{"country":"Iran","count":999},{"country":"Russia","count":353},{"country":"Myanmar","count":333},{"country":"Egypt","count":243},{"country":"Brazil","count":179},{"country":"India","count":147},{"country":"United States","count":130},{"country":"China","count":101},{"country":"Saudi Arabia","count":77},{"country":"Venezuela","count":55},{"country":"Germany","count":46},{"country":"Indonesia","count":40},{"country":"Japan","count":39},{"country":"Uganda","count":36},{"country":"United Arab Emirates","count":34},{"country":"Pakistan","count":30},{"country":"United Kingdom","count":30},{"country":"Turkey","count":26},{"country":"Spain","count":23},{"country":"Netherlands","count":20}],"destination_countries":[{"country":"Canada","count":3409}],"tags":[{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":2215},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":826},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":223},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":170},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":112},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":102},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":87},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":57},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":56},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":36},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":31},{"tag":"Python Requests Client","id":"788eb4be-0ffc-438d-92d6-d700df4fef72","count":30},{"tag":"HTTP PUT Uploader","id":"d32ee0a8-3b1e-4fb2-ba62-4925c21b3f1f","count":27},{"tag":"Git Config Crawler","id":"c536e78c-7206-47e9-90f3-6e4302444185","count":25},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":20},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":19},{"tag":"Apache Log4j RCE Attempt","id":"80592a05-bbd6-4813-836d-9ef9f822e951","count":13},{"tag":"Contains Well-known Out-of-band Interaction Domain","id":"973c9324-b548-4d80-8c46-57a0d5c39c8c","count":13},{"tag":"Citrix NetScaler LFI","id":"5a0cc1bc-aa9f-4b01-844b-beabb1f27b97","count":12},{"tag":"RouterOS Bruteforcer","id":"c8424cf8-d29d-4a8f-9810-ecdc59b67e3e","count":12}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":1775},{"operating_system":"unknown","count":1430},{"operating_system":"Mac OS X","count":175},{"operating_system":"Windows 2000","count":10},{"operating_system":"Windows 7/8","count":4},{"operating_system":"Linux 2.4.x","count":3},{"operating_system":"Linux 3.1-3.10","count":3},{"operating_system":"FreeBSD","count":2},{"operating_system":"Linux 3.11+","count":2},{"operating_system":"Linux 3.x","count":2},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":1},{"operating_system":"Linux 2.4-2.6","count":1},{"operating_system":"Windows NT kernel 6.x","count":1}],"categories":[{"category":"isp","count":1984},{"category":"mobile","count":1090},{"category":"hosting","count":204},{"category":"business","count":129},{"category":"education","count":2}],"asns":[{"asn":"AS58224","count":389},{"asn":"AS44244","count":314},{"asn":"AS8452","count":237},{"asn":"AS9829","count":126},{"asn":"AS57218","count":124},{"asn":"AS133385","count":114},{"asn":"AS136255","count":94},{"asn":"AS12389","count":73},{"asn":"AS43754","count":57},{"asn":"AS4134","count":50},{"asn":"AS132167","count":48},{"asn":"AS43766","count":47},{"asn":"AS27889","count":46},{"asn":"AS8359","count":41},{"asn":"AS14618","count":36},{"asn":"AS26599","count":32},{"asn":"AS4837","count":30},{"asn":"AS37075","count":28},{"asn":"AS17557","count":27},{"asn":"AS9988","count":27}]}},"outgoing":{"count":3199,"query":"source_country_code:CA spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":3199}],"spoofable":[{"spoofable":false,"count":3199}],"organizations":[{"organization":"DigitalOcean, LLC","count":573},{"organization":"Bell Canada","count":360},{"organization":"OVH SAS","count":306},{"organization":"TELUS Communications Inc.","count":198},{"organization":"Shaw Communications Inc.","count":135},{"organization":"Rogers Communications Canada Inc.","count":119},{"organization":"Videotron Telecom Ltee","count":101},{"organization":"Akamai Connected Cloud","count":80},{"organization":"TekSavvy Solutions, Inc.","count":70},{"organization":"Amazon.com, Inc.","count":67},{"organization":"Distributel Communications Limited","count":60},{"organization":"The Constant Company, LLC","count":59},{"organization":"Primus Telecommunications Canada Inc.","count":49},{"organization":"EastLink","count":47},{"organization":"Microsoft Corporation","count":42},{"organization":"Cogent Communications","count":41},{"organization":"Corridor Communications, INC.","count":41},{"organization":"RouterHosting LLC","count":37},{"organization":"RuralLynx Inc","count":36},{"organization":"The North Frontenac Telephone Corporation Limited","count":35}],"actors":[{"actor":"LeakIX","count":10}],"countries":[{"country":"Canada","count":3199}],"source_countries":[{"country":"Canada","count":3199}],"destination_countries":[{"country":"United States","count":2863},{"country":"United Kingdom","count":2342},{"country":"Spain","count":2065},{"country":"Ukraine","count":1688},{"country":"Turkey","count":1593},{"country":"Belarus","count":1526},{"country":"Israel","count":1426},{"country":"Indonesia","count":1251},{"country":"Singapore","count":1123},{"country":"India","count":1054},{"country":"Latvia","count":1036},{"country":"Canada","count":1019},{"country":"Germany","count":1014},{"country":"Brazil","count":933},{"country":"Finland","count":920},{"country":"Taiwan","count":919},{"country":"China","count":890},{"country":"Japan","count":827},{"country":"Netherlands","count":799},{"country":"Bulgaria","count":774}],"tags":[{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":1245},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":1228},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":932},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":736},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":549},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":388},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":274},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":272},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":257},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":163},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":160},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":133},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":117},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":115},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":93},{"tag":"Python Requests Client","id":"788eb4be-0ffc-438d-92d6-d700df4fef72","count":80},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":70},{"tag":"Git Config Crawler","id":"c536e78c-7206-47e9-90f3-6e4302444185","count":67},{"tag":"JRMI Scanner","id":"c849922e-bb9c-412e-a819-6999ab8ad862","count":62},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":48}],"operating_systems":[{"operating_system":"unknown","count":867},{"operating_system":"Linux 2.2-3.x","count":841},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":490},{"operating_system":"Linux 3.1-3.10","count":228},{"operating_system":"Linux 3.11+","count":196},{"operating_system":"Linux 2.4.x","count":171},{"operating_system":"Windows 2000","count":129},{"operating_system":"Linux 3.x","count":95},{"operating_system":"Linux 2.4-2.6","count":83},{"operating_system":"Windows 7/8","count":61},{"operating_system":"Linux 2.6","count":20},{"operating_system":"Windows XP","count":13},{"operating_system":"Mac OS X","count":2},{"operating_system":"FreeBSD","count":1},{"operating_system":"Mac OS X 10.x","count":1},{"operating_system":"Windows NT kernel 6.x","count":1}],"categories":[{"category":"isp","count":1730},{"category":"hosting","count":1368},{"category":"business","count":83},{"category":"mobile","count":14},{"category":"education","count":4}],"asns":[{"asn":"AS14061","count":573},{"asn":"AS577","count":345},{"asn":"AS16276","count":306},{"asn":"AS852","count":192},{"asn":"AS6327","count":135},{"asn":"AS812","count":119},{"asn":"AS5769","count":101},{"asn":"AS63949","count":80},{"asn":"AS5645","count":70},{"asn":"AS16509","count":67},{"asn":"AS11814","count":60},{"asn":"AS20473","count":59},{"asn":"AS6407","count":49},{"asn":"AS11260","count":47},{"asn":"AS174","count":41},{"asn":"AS8075","count":40},{"asn":"AS14956","count":37},{"asn":"AS399743","count":36},{"asn":"AS393632","count":35},{"asn":"AS15102","count":33}]}}},"Germany":{"abbrev":"DE","incoming":{"count":177373,"query":"destination_country_code:DE spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":177373}],"spoofable":[{"spoofable":false,"count":177373}],"organizations":[{"organization":"CHINANET-BACKBONE","count":25164},{"organization":"CHINA UNICOM China169 Backbone","count":10575},{"organization":"National Internet Backbone","count":9713},{"organization":"DigitalOcean, LLC","count":8831},{"organization":"Korea Telecom","count":6311},{"organization":"Shenzhen Tencent Computer Systems Company Limited","count":5028},{"organization":"TE-AS","count":4552},{"organization":"Data Communication Business Group","count":3379},{"organization":"Amazon.com, Inc.","count":3311},{"organization":"Telecom Namibia","count":2576},{"organization":"VNPT Corp","count":2484},{"organization":"Tencent Building, Kejizhongyi Avenue","count":2060},{"organization":"Alibaba (US) Technology Co., Ltd.","count":1613},{"organization":"UNINET","count":1410},{"organization":"Mahanagar Telephone Nigam Limited","count":1309},{"organization":"PJSC Rostelecom","count":1181},{"organization":"NTT Communications Corporation","count":1106},{"organization":"Telecom Argentina S.A.","count":1079},{"organization":"Hangzhou Alibaba Advertising Co.,Ltd.","count":1057},{"organization":"Hathway IP Over Cable Internet","count":1034}],"actors":[{"actor":"Stretchoid","count":1954},{"actor":"PDRLabs.net","count":787},{"actor":"LeakIX","count":87},{"actor":"Recyber Project","count":51},{"actor":"XMCO.fr","count":14},{"actor":"Scanopticon","count":1}],"countries":[{"country":"China","count":48451},{"country":"India","count":18002},{"country":"United States","count":17758},{"country":"South Korea","count":8842},{"country":"Brazil","count":7426},{"country":"Russia","count":5164},{"country":"Egypt","count":4651},{"country":"Taiwan","count":4648},{"country":"Vietnam","count":4245},{"country":"Germany","count":3679},{"country":"Singapore","count":3529},{"country":"Japan","count":3020},{"country":"Hong Kong","count":3016},{"country":"Namibia","count":2588},{"country":"United Kingdom","count":2469},{"country":"Venezuela","count":2139},{"country":"Netherlands","count":2084},{"country":"Mexico","count":1874},{"country":"Iran","count":1823},{"country":"Argentina","count":1816}],"source_countries":[{"country":"China","count":48451},{"country":"India","count":18002},{"country":"United States","count":17758},{"country":"South Korea","count":8842},{"country":"Brazil","count":7426},{"country":"Russia","count":5164},{"country":"Egypt","count":4651},{"country":"Taiwan","count":4648},{"country":"Vietnam","count":4245},{"country":"Germany","count":3679},{"country":"Singapore","count":3529},{"country":"Japan","count":3020},{"country":"Hong Kong","count":3016},{"country":"Namibia","count":2588},{"country":"United Kingdom","count":2469},{"country":"Venezuela","count":2139},{"country":"Netherlands","count":2084},{"country":"Mexico","count":1874},{"country":"Iran","count":1823},{"country":"Argentina","count":1816}],"destination_countries":[{"country":"Germany","count":177373},{"country":"United States","count":171488},{"country":"United Kingdom","count":158027},{"country":"Spain","count":145534},{"country":"Ukraine","count":138971},{"country":"Israel","count":128155},{"country":"Turkey","count":124608},{"country":"Belarus","count":119690},{"country":"Indonesia","count":116812},{"country":"Singapore","count":105548},{"country":"India","count":101617},{"country":"Latvia","count":100285},{"country":"Canada","count":97975},{"country":"Taiwan","count":94883},{"country":"Brazil","count":94499},{"country":"Finland","count":94149},{"country":"China","count":93571},{"country":"Japan","count":87392},{"country":"Netherlands","count":81670},{"country":"Bulgaria","count":81381}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":100390},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":59993},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":44649},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":35765},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":24483},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":19542},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":17399},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":14593},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":11763},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":10186},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":7393},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":5513},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":5260},{"tag":"Cisco IMC Supervisor and UCS Director Backdoor","id":"5fedddae-5c7b-4d66-a993-434796ccd1c1","count":4820},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":4412},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":4228},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":3981},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":3768},{"tag":"Realtek Miniigd UPnP Worm CVE-2014-8361","id":"0ee5a9fb-bf1c-46a6-8d8e-bcc9895d1334","count":3140},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":2703}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":69501},{"operating_system":"unknown","count":23785},{"operating_system":"Linux 3.11+","count":22561},{"operating_system":"Linux 2.4.x","count":15509},{"operating_system":"Linux 3.1-3.10","count":13752},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":7699},{"operating_system":"Windows 7/8","count":5972},{"operating_system":"Linux 3.x","count":5859},{"operating_system":"Linux 2.4-2.6","count":5322},{"operating_system":"Windows 2000","count":4260},{"operating_system":"Windows XP","count":1487},{"operating_system":"Linux 2.6","count":1316},{"operating_system":"Mac OS X 10.x","count":153},{"operating_system":"Mac OS X","count":82},{"operating_system":"FreeBSD","count":52},{"operating_system":"Windows NT kernel 6.x","count":40},{"operating_system":"Linux (Android)","count":9},{"operating_system":"Linux 2.2.x","count":6},{"operating_system":"FreeBSD 8.x","count":3},{"operating_system":"MacOS X 10.9 or newer (sometimes iPhone or iPad)","count":2}],"categories":[{"category":"isp","count":127431},{"category":"hosting","count":36789},{"category":"business","count":7759},{"category":"mobile","count":4854},{"category":"education","count":528},{"category":"inactive","count":2}],"asns":[{"asn":"AS4134","count":25164},{"asn":"AS4837","count":10575},{"asn":"AS9829","count":9713},{"asn":"AS14061","count":8831},{"asn":"AS4766","count":6311},{"asn":"AS45090","count":5028},{"asn":"AS8452","count":4552},{"asn":"AS3462","count":3379},{"asn":"AS36996","count":2576},{"asn":"AS45899","count":2484},{"asn":"AS132203","count":2060},{"asn":"AS14618","count":1874},{"asn":"AS45102","count":1613},{"asn":"AS16509","count":1437},{"asn":"AS8151","count":1410},{"asn":"AS17813","count":1309},{"asn":"AS4713","count":1106},{"asn":"AS7303","count":1079},{"asn":"AS37963","count":1057},{"asn":"AS17488","count":1034}]}},"incoming_only":{"count":1874,"query":"destination_country_code:DE spoofable:false single_destination:true classification:malicious","stats":{"classifications":[{"classification":"malicious","count":1874}],"spoofable":[{"spoofable":false,"count":1874}],"organizations":[{"organization":"TE-AS","count":442},{"organization":"National Internet Backbone","count":86},{"organization":"CHINANET-BACKBONE","count":76},{"organization":"Amazon.com, Inc.","count":71},{"organization":"Iran Cell Service and Communication Company","count":58},{"organization":"TELEFÔNICA BRASIL S.A","count":56},{"organization":"Telecomunicaciones MOVILNET","count":52},{"organization":"Iran Telecommunication Company PJS","count":51},{"organization":"Pakistan Telecommunication Company Limited","count":35},{"organization":"Airtek Solutions C.A.","count":30},{"organization":"CHINA UNICOM China169 Backbone","count":30},{"organization":"PJSC Rostelecom","count":24},{"organization":"TELEFONICA DE ESPANA S.A.U.","count":21},{"organization":"NTT Communications Corporation","count":18},{"organization":"Telecom Argentina S.A.","count":17},{"organization":"CANTV Servicios, Venezuela","count":13},{"organization":"Telecom Algeria","count":13},{"organization":"Claro NXT Telecomunicacoes Ltda","count":12},{"organization":"Claro S/A","count":12},{"organization":"Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM","count":12}],"actors":{},"countries":[{"country":"Egypt","count":446},{"country":"Brazil","count":189},{"country":"Iran","count":150},{"country":"China","count":148},{"country":"United States","count":111},{"country":"India","count":108},{"country":"Venezuela","count":95},{"country":"Russia","count":44},{"country":"Germany","count":36},{"country":"Japan","count":36},{"country":"Pakistan","count":36},{"country":"United Kingdom","count":29},{"country":"Spain","count":27},{"country":"Argentina","count":23},{"country":"Mexico","count":16},{"country":"Indonesia","count":15},{"country":"Algeria","count":14},{"country":"France","count":14},{"country":"Taiwan","count":13},{"country":"Vietnam","count":13}],"source_countries":[{"country":"Egypt","count":446},{"country":"Brazil","count":189},{"country":"Iran","count":150},{"country":"China","count":148},{"country":"United States","count":111},{"country":"India","count":108},{"country":"Venezuela","count":95},{"country":"Russia","count":44},{"country":"Germany","count":36},{"country":"Japan","count":36},{"country":"Pakistan","count":36},{"country":"United Kingdom","count":29},{"country":"Spain","count":27},{"country":"Argentina","count":23},{"country":"Mexico","count":16},{"country":"Indonesia","count":15},{"country":"Algeria","count":14},{"country":"France","count":14},{"country":"Taiwan","count":13},{"country":"Vietnam","count":13}],"destination_countries":[{"country":"Germany","count":1874}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":1086},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":382},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":373},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":149},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":124},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":115},{"tag":"Realtek Miniigd UPnP Worm CVE-2014-8361","id":"0ee5a9fb-bf1c-46a6-8d8e-bcc9895d1334","count":100},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":83},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":71},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":55},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":49},{"tag":"Metasploit","id":"1ea048b8-81e5-4a6d-bde8-6d6fc8563a9e","count":48},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":41},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":36},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":32},{"tag":"HTTP PUT Uploader","id":"d32ee0a8-3b1e-4fb2-ba62-4925c21b3f1f","count":23},{"tag":"Python Requests Client","id":"788eb4be-0ffc-438d-92d6-d700df4fef72","count":21},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":19},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":15},{"tag":"Citrix NetScaler LFI","id":"5a0cc1bc-aa9f-4b01-844b-beabb1f27b97","count":14}],"operating_systems":[{"operating_system":"unknown","count":1513},{"operating_system":"Linux 2.2-3.x","count":220},{"operating_system":"Windows 2000","count":49},{"operating_system":"Linux 2.4.x","count":26},{"operating_system":"Linux 3.x","count":15},{"operating_system":"Windows 7/8","count":14},{"operating_system":"Linux 2.4-2.6","count":11},{"operating_system":"Linux 3.1-3.10","count":9},{"operating_system":"Linux 3.11+","count":6},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":4},{"operating_system":"Windows XP","count":3},{"operating_system":"Linux 2.6","count":2},{"operating_system":"Windows NT kernel 6.x","count":2}],"categories":[{"category":"isp","count":1435},{"category":"mobile","count":244},{"category":"hosting","count":144},{"category":"business","count":49},{"category":"education","count":2}],"asns":[{"asn":"AS8452","count":442},{"asn":"AS9829","count":86},{"asn":"AS4134","count":76},{"asn":"AS44244","count":58},{"asn":"AS27889","count":52},{"asn":"AS58224","count":51},{"asn":"AS14618","count":50},{"asn":"AS26599","count":43},{"asn":"AS17557","count":35},{"asn":"AS4837","count":30},{"asn":"AS61461","count":30},{"asn":"AS12389","count":24},{"asn":"AS16509","count":21},{"asn":"AS3352","count":21},{"asn":"AS4713","count":18},{"asn":"AS7303","count":17},{"asn":"AS36947","count":13},{"asn":"AS22085","count":12},{"asn":"AS28573","count":12},{"asn":"AS3320","count":11}]}},"outgoing":{"count":12648,"query":"source_country_code:DE spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":12648}],"spoofable":[{"spoofable":false,"count":12648}],"organizations":[{"organization":"Deutsche Telekom AG","count":2222},{"organization":"DigitalOcean, LLC","count":1622},{"organization":"Telefonica Germany GmbH & Co.OHG","count":1039},{"organization":"Hetzner Online GmbH","count":1021},{"organization":"Contabo GmbH","count":723},{"organization":"Vodafone GmbH","count":712},{"organization":"1&1 Versatel Deutschland GmbH","count":294},{"organization":"SkyLink Data Center BV","count":266},{"organization":"Amazon.com, Inc.","count":263},{"organization":"Alpha Strike Labs GmbH","count":254},{"organization":"OVH SAS","count":238},{"organization":"IPXO LIMITED","count":224},{"organization":"Akamai Connected Cloud","count":182},{"organization":"EWE TEL GmbH","count":170},{"organization":"Strato AG","count":149},{"organization":"Clouvider","count":144},{"organization":"Ferdinand Zink trading as Tube-Hosting","count":144},{"organization":"wilhelm.tel GmbH","count":141},{"organization":"IONOS SE","count":129},{"organization":"Plusnet GmbH","count":114}],"actors":[{"actor":"LeakIX","count":12},{"actor":"Scanopticon","count":1}],"countries":[{"country":"Germany","count":12648}],"source_countries":[{"country":"Germany","count":12648}],"destination_countries":[{"country":"United States","count":10294},{"country":"United Kingdom","count":7910},{"country":"Spain","count":6502},{"country":"Ukraine","count":5567},{"country":"Belarus","count":5019},{"country":"Turkey","count":4907},{"country":"Israel","count":4835},{"country":"Indonesia","count":4183},{"country":"Singapore","count":4155},{"country":"India","count":3795},{"country":"Germany","count":3679},{"country":"Canada","count":3520},{"country":"Latvia","count":3272},{"country":"Finland","count":3267},{"country":"Brazil","count":3247},{"country":"Netherlands","count":3189},{"country":"Taiwan","count":3147},{"country":"China","count":3053},{"country":"Japan","count":3004},{"country":"France","count":2675}],"tags":[{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":7851},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":4089},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":3140},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":2833},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":2014},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":1881},{"tag":"Compromised Raspberry Pi","id":"91bc0299-3ff9-4a9a-9ab6-726ba501c9af","count":986},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":924},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":837},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":781},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":675},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":594},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":582},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":558},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":532},{"tag":"Python Requests Client","id":"788eb4be-0ffc-438d-92d6-d700df4fef72","count":388},{"tag":"SMBv2 Crawler","id":"d768ec7c-fb40-4ceb-aa3d-5a7181c3fa87","count":380},{"tag":"Go HTTP Client","id":"3d144850-efcc-436a-9008-c5d28ac581ae","count":360},{"tag":"EtherNet/IP Scanner","id":"1552ec97-eb19-421e-b772-847d7f2d310c","count":305},{"tag":"Git Config Crawler","id":"c536e78c-7206-47e9-90f3-6e4302444185","count":278}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":4581},{"operating_system":"unknown","count":4529},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":1551},{"operating_system":"Linux 3.11+","count":724},{"operating_system":"Windows 2000","count":624},{"operating_system":"Linux 3.1-3.10","count":197},{"operating_system":"Windows 7/8","count":183},{"operating_system":"Linux 2.4.x","count":115},{"operating_system":"Linux 3.x","count":60},{"operating_system":"Windows XP","count":30},{"operating_system":"Linux 2.4-2.6","count":22},{"operating_system":"Linux 2.6","count":21},{"operating_system":"FreeBSD","count":4},{"operating_system":"Mac OS X","count":4},{"operating_system":"Windows NT kernel 6.x","count":3}],"categories":[{"category":"hosting","count":6561},{"category":"isp","count":5529},{"category":"business","count":423},{"category":"mobile","count":120},{"category":"education","count":15}],"asns":[{"asn":"AS3320","count":2222},{"asn":"AS14061","count":1622},{"asn":"AS6805","count":1039},{"asn":"AS24940","count":1021},{"asn":"AS51167","count":723},{"asn":"AS3209","count":712},{"asn":"AS8881","count":294},{"asn":"AS44592","count":266},{"asn":"AS16509","count":263},{"asn":"AS208843","count":254},{"asn":"AS16276","count":238},{"asn":"AS206092","count":224},{"asn":"AS63949","count":182},{"asn":"AS9145","count":170},{"asn":"AS6724","count":149},{"asn":"AS49581","count":144},{"asn":"AS62240","count":144},{"asn":"AS15943","count":141},{"asn":"AS8560","count":129},{"asn":"AS20676","count":114}]}}},"United States":{"abbrev":"US","incoming":{"count":737754,"query":"destination_country_code:US spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":737754}],"spoofable":[{"spoofable":false,"count":737754}],"organizations":[{"organization":"National Internet Backbone","count":87999},{"organization":"CHINANET-BACKBONE","count":76637},{"organization":"CHINA UNICOM China169 Backbone","count":51425},{"organization":"TE-AS","count":43614},{"organization":"Telecom Namibia","count":16830},{"organization":"DigitalOcean, LLC","count":14403},{"organization":"VNPT Corp","count":12364},{"organization":"Mahanagar Telephone Nigam Limited","count":11624},{"organization":"Amazon.com, Inc.","count":11561},{"organization":"Telecomunicaciones MOVILNET","count":11249},{"organization":"Data Communication Business Group","count":10660},{"organization":"Korea Telecom","count":10360},{"organization":"Telecom Argentina S.A.","count":8716},{"organization":"Hathway IP Over Cable Internet","count":7792},{"organization":"PJSC Rostelecom","count":7102},{"organization":"Shenzhen Tencent Computer Systems Company Limited","count":7014},{"organization":"Claro S/A","count":6284},{"organization":"PT Telekomunikasi Indonesia","count":6263},{"organization":"CANTV Servicios, Venezuela","count":6206},{"organization":"UNINET","count":5854}],"actors":[{"actor":"Stretchoid","count":1954},{"actor":"PDRLabs.net","count":1105},{"actor":"Recyber Project","count":96},{"actor":"LeakIX","count":87},{"actor":"XMCO.fr","count":14},{"actor":"NetWatch","count":1},{"actor":"Scanopticon","count":1}],"countries":[{"country":"China","count":162327},{"country":"India","count":130422},{"country":"Egypt","count":44343},{"country":"United States","count":44122},{"country":"Brazil","count":38545},{"country":"Russia","count":25380},{"country":"Venezuela","count":21107},{"country":"Vietnam","count":17900},{"country":"Namibia","count":16845},{"country":"South Korea","count":15493},{"country":"Taiwan","count":14148},{"country":"Iran","count":14022},{"country":"Argentina","count":13064},{"country":"Japan","count":12241},{"country":"Germany","count":10294},{"country":"Indonesia","count":10029},{"country":"Hong Kong","count":8074},{"country":"Thailand","count":7078},{"country":"Italy","count":6952},{"country":"Mexico","count":6927}],"source_countries":[{"country":"China","count":162327},{"country":"India","count":130422},{"country":"Egypt","count":44343},{"country":"United States","count":44122},{"country":"Brazil","count":38545},{"country":"Russia","count":25380},{"country":"Venezuela","count":21107},{"country":"Vietnam","count":17900},{"country":"Namibia","count":16845},{"country":"South Korea","count":15493},{"country":"Taiwan","count":14148},{"country":"Iran","count":14022},{"country":"Argentina","count":13064},{"country":"Japan","count":12241},{"country":"Germany","count":10294},{"country":"Indonesia","count":10029},{"country":"Hong Kong","count":8074},{"country":"Thailand","count":7078},{"country":"Italy","count":6952},{"country":"Mexico","count":6927}],"destination_countries":[{"country":"United States","count":737754},{"country":"United Kingdom","count":525977},{"country":"Spain","count":460351},{"country":"Ukraine","count":352974},{"country":"Belarus","count":319697},{"country":"Turkey","count":298395},{"country":"Israel","count":295608},{"country":"Indonesia","count":234825},{"country":"Singapore","count":189178},{"country":"China","count":179929},{"country":"India","count":175739},{"country":"Latvia","count":175269},{"country":"Germany","count":171488},{"country":"Canada","count":164271},{"country":"Taiwan","count":160295},{"country":"Brazil","count":156644},{"country":"Finland","count":155278},{"country":"Japan","count":135867},{"country":"Bulgaria","count":127114},{"country":"Netherlands","count":123506}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":487098},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":207250},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":164592},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":122750},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":120950},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":82481},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":45486},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":33362},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":27174},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":26685},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":19785},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":18568},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":18157},{"tag":"Realtek Miniigd UPnP Worm CVE-2014-8361","id":"0ee5a9fb-bf1c-46a6-8d8e-bcc9895d1334","count":14963},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":14894},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":12876},{"tag":"GPON CVE-2018-10561 Router Worm","id":"56cb92ac-8fd1-4b93-846c-c15918b5fb87","count":11280},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":8931},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":8324},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":8153}],"operating_systems":[{"operating_system":"unknown","count":238948},{"operating_system":"Linux 2.2-3.x","count":181418},{"operating_system":"Linux 2.4.x","count":75392},{"operating_system":"Linux 3.11+","count":59579},{"operating_system":"Linux 3.1-3.10","count":44581},{"operating_system":"Linux 3.x","count":35991},{"operating_system":"Linux 2.4-2.6","count":35583},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":29990},{"operating_system":"Windows 7/8","count":18055},{"operating_system":"Windows 2000","count":9686},{"operating_system":"Windows XP","count":3584},{"operating_system":"Linux 2.6","count":3307},{"operating_system":"Mac OS X","count":953},{"operating_system":"Mac OS X 10.x","count":289},{"operating_system":"Windows NT kernel 6.x","count":192},{"operating_system":"FreeBSD","count":152},{"operating_system":"Linux (Android)","count":22},{"operating_system":"Linux 2.2.x","count":18},{"operating_system":"FreeBSD 8.x","count":8},{"operating_system":"Linux 2.0","count":2}],"categories":[{"category":"isp","count":595567},{"category":"hosting","count":74910},{"category":"mobile","count":41892},{"category":"business","count":24041},{"category":"education","count":1305},{"category":"inactive","count":6}],"asns":[{"asn":"AS9829","count":87999},{"asn":"AS4134","count":76637},{"asn":"AS4837","count":51425},{"asn":"AS8452","count":43614},{"asn":"AS36996","count":16830},{"asn":"AS14061","count":14403},{"asn":"AS45899","count":12364},{"asn":"AS17813","count":11624},{"asn":"AS27889","count":11249},{"asn":"AS3462","count":10660},{"asn":"AS4766","count":10360},{"asn":"AS7303","count":8716},{"asn":"AS14618","count":7967},{"asn":"AS17488","count":7792},{"asn":"AS45090","count":7014},{"asn":"AS12389","count":6465},{"asn":"AS22085","count":6281},{"asn":"AS7713","count":6263},{"asn":"AS8048","count":6206},{"asn":"AS8151","count":5854}]}},"incoming_only":{"count":35436,"query":"destination_country_code:US spoofable:false single_destination:true classification:malicious","stats":{"classifications":[{"classification":"malicious","count":35436}],"spoofable":[{"spoofable":false,"count":35436}],"organizations":[{"organization":"TE-AS","count":6219},{"organization":"National Internet Backbone","count":3449},{"organization":"CHINANET-BACKBONE","count":1820},{"organization":"Mobile Communication Company of Iran PLC","count":1154},{"organization":"CHINA UNICOM China169 Backbone","count":860},{"organization":"Iran Telecommunication Company PJS","count":674},{"organization":"Amazon.com, Inc.","count":671},{"organization":"Telecomunicaciones MOVILNET","count":631},{"organization":"TELEFÔNICA BRASIL S.A","count":527},{"organization":"CANTV Servicios, Venezuela","count":505},{"organization":"Microsoft Corporation","count":477},{"organization":"PJSC Rostelecom","count":451},{"organization":"VNPT Corp","count":396},{"organization":"Iran Cell Service and Communication Company","count":375},{"organization":"PT Telekomunikasi Indonesia","count":363},{"organization":"Pakistan Telecommunication Company Limited","count":326},{"organization":"DigitalOcean, LLC","count":284},{"organization":"Data Communication Business Group","count":279},{"organization":"NTT Communications Corporation","count":249},{"organization":"Airtek Solutions C.A.","count":245}],"actors":[{"actor":"PDRLabs.net","count":7}],"countries":[{"country":"Egypt","count":6337},{"country":"India","count":4370},{"country":"China","count":3575},{"country":"Iran","count":3090},{"country":"United States","count":2136},{"country":"Russia","count":1878},{"country":"Brazil","count":1822},{"country":"Venezuela","count":1446},{"country":"Indonesia","count":587},{"country":"Vietnam","count":529},{"country":"Japan","count":494},{"country":"Germany","count":455},{"country":"United Kingdom","count":433},{"country":"Myanmar","count":412},{"country":"Thailand","count":400},{"country":"Italy","count":393},{"country":"Pakistan","count":382},{"country":"Taiwan","count":342},{"country":"Argentina","count":312},{"country":"Spain","count":297}],"source_countries":[{"country":"Egypt","count":6337},{"country":"India","count":4370},{"country":"China","count":3575},{"country":"Iran","count":3090},{"country":"United States","count":2136},{"country":"Russia","count":1878},{"country":"Brazil","count":1822},{"country":"Venezuela","count":1446},{"country":"Indonesia","count":587},{"country":"Vietnam","count":529},{"country":"Japan","count":494},{"country":"Germany","count":455},{"country":"United Kingdom","count":433},{"country":"Myanmar","count":412},{"country":"Thailand","count":400},{"country":"Italy","count":393},{"country":"Pakistan","count":382},{"country":"Taiwan","count":342},{"country":"Argentina","count":312},{"country":"Spain","count":297}],"destination_countries":[{"country":"United States","count":35436}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":14323},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":10702},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":9346},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":8545},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":7568},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":3727},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":2021},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":1676},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":983},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":924},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":868},{"tag":"Realtek Miniigd UPnP Worm CVE-2014-8361","id":"0ee5a9fb-bf1c-46a6-8d8e-bcc9895d1334","count":802},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":768},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":502},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":491},{"tag":"Nmap","id":"1abb3207-bf1d-4ecc-8b3d-087f68729128","count":444},{"tag":"Metasploit","id":"1ea048b8-81e5-4a6d-bde8-6d6fc8563a9e","count":366},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":321},{"tag":"Netgear DGN Command Execution","id":"994536ba-203a-4d25-9652-9e9850bf7864","count":303},{"tag":"RouterOS Bruteforcer","id":"c8424cf8-d29d-4a8f-9810-ecdc59b67e3e","count":286}],"operating_systems":[{"operating_system":"unknown","count":30743},{"operating_system":"Linux 2.2-3.x","count":3645},{"operating_system":"Mac OS X","count":499},{"operating_system":"Linux 2.4.x","count":113},{"operating_system":"Linux 3.x","count":87},{"operating_system":"Windows 2000","count":67},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":61},{"operating_system":"Windows 7/8","count":61},{"operating_system":"Linux 3.1-3.10","count":46},{"operating_system":"Linux 2.4-2.6","count":43},{"operating_system":"Linux 3.11+","count":42},{"operating_system":"Windows XP","count":19},{"operating_system":"Windows NT kernel 6.x","count":8},{"operating_system":"FreeBSD","count":1},{"operating_system":"Linux 2.6","count":1}],"categories":[{"category":"isp","count":27152},{"category":"mobile","count":4231},{"category":"hosting","count":2694},{"category":"business","count":1289},{"category":"education","count":68},{"category":"inactive","count":1}],"asns":[{"asn":"AS8452","count":6219},{"asn":"AS9829","count":3449},{"asn":"AS4134","count":1820},{"asn":"AS197207","count":1154},{"asn":"AS4837","count":860},{"asn":"AS58224","count":674},{"asn":"AS27889","count":631},{"asn":"AS8048","count":505},{"asn":"AS8075","count":477},{"asn":"AS14618","count":428},{"asn":"AS26599","count":414},{"asn":"AS12389","count":403},{"asn":"AS45899","count":396},{"asn":"AS44244","count":375},{"asn":"AS7713","count":363},{"asn":"AS17557","count":326},{"asn":"AS14061","count":284},{"asn":"AS3462","count":279},{"asn":"AS4713","count":249},{"asn":"AS61461","count":245}]}},"outgoing":{"count":53600,"query":"source_country_code:US spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":53600}],"spoofable":[{"spoofable":false,"count":53600}],"organizations":[{"organization":"Amazon.com, Inc.","count":11291},{"organization":"DigitalOcean, LLC","count":7013},{"organization":"Verizon Business","count":4229},{"organization":"Microsoft Corporation","count":3848},{"organization":"Comcast Cable Communications, LLC","count":1997},{"organization":"Charter Communications Inc","count":1735},{"organization":"IPXO LIMITED","count":1119},{"organization":"Google LLC","count":949},{"organization":"T-Mobile USA, Inc.","count":941},{"organization":"AT&T Services, Inc.","count":834},{"organization":"Clouvider","count":805},{"organization":"Alibaba (US) Technology Co., Ltd.","count":790},{"organization":"Akamai Connected Cloud","count":780},{"organization":"Charter Communications","count":764},{"organization":"The Constant Company, LLC","count":624},{"organization":"Cox Communications Inc.","count":584},{"organization":"Buckeye Cablevision, Inc.","count":546},{"organization":"Cogent Communications","count":490},{"organization":"ColoCrossing","count":482},{"organization":"CenturyLink Communications, LLC","count":466}],"actors":[{"actor":"Stretchoid","count":1954},{"actor":"LeakIX","count":37},{"actor":"NetWatch","count":1}],"countries":[{"country":"United States","count":53600}],"source_countries":[{"country":"United States","count":53600}],"destination_countries":[{"country":"United States","count":44122},{"country":"United Kingdom","count":37470},{"country":"Spain","count":28060},{"country":"Ukraine","count":27145},{"country":"Belarus","count":24503},{"country":"Turkey","count":24500},{"country":"Israel","count":24127},{"country":"Indonesia","count":21672},{"country":"Singapore","count":20925},{"country":"India","count":18357},{"country":"Germany","count":17758},{"country":"China","count":17260},{"country":"Canada","count":17239},{"country":"Brazil","count":16759},{"country":"Latvia","count":16018},{"country":"Taiwan","count":15855},{"country":"Finland","count":15522},{"country":"Japan","count":14863},{"country":"Netherlands","count":14258},{"country":"Australia","count":13257}],"tags":[{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":27331},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":21218},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":14605},{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":12838},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":11917},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":6515},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":5377},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":4889},{"tag":"ENV Crawler","id":"c1c5c076-fad6-4159-a63f-daccbb0e7864","count":3819},{"tag":"Python Requests Client","id":"788eb4be-0ffc-438d-92d6-d700df4fef72","count":3275},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":2913},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":2619},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":2560},{"tag":"SIP OPTIONS Scanner","id":"77069c85-09a3-4322-bbf3-aefda8d46ae7","count":2509},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":2469},{"tag":"Redis Scanner","id":"b1ac57fc-eb97-480e-8d10-718b0fff303a","count":2083},{"tag":"Azure OMI RCE Check","id":"1a2da3d3-57d6-4030-b686-a1fbdafa5987","count":2074},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":1763},{"tag":"Nmap","id":"1abb3207-bf1d-4ecc-8b3d-087f68729128","count":1575},{"tag":"Stretchoid","id":"638bc904-1a62-419a-9663-6685b6f2089d","count":1563}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":21538},{"operating_system":"unknown","count":14792},{"operating_system":"Linux 3.11+","count":4956},{"operating_system":"Linux 3.x","count":3039},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":2258},{"operating_system":"Windows 2000","count":2019},{"operating_system":"Linux 3.1-3.10","count":1785},{"operating_system":"Windows 7/8","count":855},{"operating_system":"Linux 2.4.x","count":774},{"operating_system":"Linux 2.4-2.6","count":691},{"operating_system":"Linux 2.6","count":621},{"operating_system":"Windows XP","count":131},{"operating_system":"Mac OS X","count":76},{"operating_system":"Linux 2.2.x","count":30},{"operating_system":"FreeBSD","count":16},{"operating_system":"Mac OS X 10.x","count":6},{"operating_system":"Linux (Android)","count":5},{"operating_system":"Windows NT kernel 6.x","count":5},{"operating_system":"MacOS X 10.9 or newer (sometimes iPhone or iPad)","count":2},{"operating_system":"Nintendo 3DS","count":1}],"categories":[{"category":"hosting","count":29385},{"category":"isp","count":19093},{"category":"business","count":4808},{"category":"mobile","count":206},{"category":"education","count":98},{"category":"inactive","count":1}],"asns":[{"asn":"AS14618","count":10174},{"asn":"AS14061","count":7013},{"asn":"AS8075","count":3846},{"asn":"AS6167","count":2690},{"asn":"AS206092","count":1119},{"asn":"AS16509","count":1117},{"asn":"AS7922","count":1062},{"asn":"AS21928","count":941},{"asn":"AS396982","count":937},{"asn":"AS701","count":836},{"asn":"AS7018","count":834},{"asn":"AS62240","count":805},{"asn":"AS45102","count":790},{"asn":"AS63949","count":780},{"asn":"AS20115","count":728},{"asn":"AS20001","count":702},{"asn":"AS22394","count":702},{"asn":"AS20473","count":624},{"asn":"AS22773","count":584},{"asn":"AS13490","count":546}]}}},"Israel":{"abbrev":"IL","incoming":{"count":323590,"query":"destination_country_code:IL spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":323590}],"spoofable":[{"spoofable":false,"count":323590}],"organizations":[{"organization":"CHINANET-BACKBONE","count":41708},{"organization":"TE-AS","count":24846},{"organization":"National Internet Backbone","count":24217},{"organization":"CHINA UNICOM China169 Backbone","count":21970},{"organization":"DigitalOcean, LLC","count":9977},{"organization":"Korea Telecom","count":7113},{"organization":"Shenzhen Tencent Computer Systems Company Limited","count":5907},{"organization":"Telecom Namibia","count":5749},{"organization":"Amazon.com, Inc.","count":5727},{"organization":"Data Communication Business Group","count":4916},{"organization":"VNPT Corp","count":4722},{"organization":"Mahanagar Telephone Nigam Limited","count":3595},{"organization":"UNINET","count":2854},{"organization":"PJSC Rostelecom","count":2671},{"organization":"Telecom Argentina S.A.","count":2662},{"organization":"Hathway IP Over Cable Internet","count":2478},{"organization":"Telecomunicaciones MOVILNET","count":2391},{"organization":"TOT Public Company Limited","count":2377},{"organization":"Alibaba (US) Technology Co., Ltd.","count":2323},{"organization":"CANTV Servicios, Venezuela","count":2165}],"actors":[{"actor":"Stretchoid","count":1954},{"actor":"PDRLabs.net","count":943},{"actor":"LeakIX","count":87},{"actor":"Recyber Project","count":46},{"actor":"XMCO.fr","count":14},{"actor":"Scanopticon","count":1}],"countries":[{"country":"China","count":81844},{"country":"India","count":40385},{"country":"Egypt","count":25035},{"country":"United States","count":24127},{"country":"Brazil","count":14574},{"country":"South Korea","count":10438},{"country":"Russia","count":10268},{"country":"Vietnam","count":7368},{"country":"Taiwan","count":6947},{"country":"Venezuela","count":5827},{"country":"Namibia","count":5761},{"country":"Thailand","count":5551},{"country":"Japan","count":5078},{"country":"Germany","count":4835},{"country":"Argentina","count":4234},{"country":"Singapore","count":4026},{"country":"Hong Kong","count":3972},{"country":"Iran","count":3518},{"country":"Mexico","count":3514},{"country":"United Kingdom","count":3353}],"source_countries":[{"country":"China","count":81844},{"country":"India","count":40385},{"country":"Egypt","count":25035},{"country":"United States","count":24127},{"country":"Brazil","count":14574},{"country":"South Korea","count":10438},{"country":"Russia","count":10268},{"country":"Vietnam","count":7368},{"country":"Taiwan","count":6947},{"country":"Venezuela","count":5827},{"country":"Namibia","count":5761},{"country":"Thailand","count":5551},{"country":"Japan","count":5078},{"country":"Germany","count":4835},{"country":"Argentina","count":4234},{"country":"Singapore","count":4026},{"country":"Hong Kong","count":3972},{"country":"Iran","count":3518},{"country":"Mexico","count":3514},{"country":"United Kingdom","count":3353}],"destination_countries":[{"country":"Israel","count":323590},{"country":"United States","count":295608},{"country":"United Kingdom","count":258675},{"country":"Spain","count":236344},{"country":"Ukraine","count":224614},{"country":"Turkey","count":187148},{"country":"Belarus","count":184143},{"country":"Indonesia","count":160158},{"country":"Latvia","count":134852},{"country":"Singapore","count":134544},{"country":"India","count":128728},{"country":"Germany","count":128155},{"country":"China","count":124395},{"country":"Finland","count":121951},{"country":"Taiwan","count":121580},{"country":"Canada","count":120394},{"country":"Brazil","count":117647},{"country":"Japan","count":105246},{"country":"Bulgaria","count":102844},{"country":"Netherlands","count":96838}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":206414},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":93673},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":85606},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":49629},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":41957},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":37143},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":24136},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":21416},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":19771},{"tag":"Realtek Miniigd UPnP Worm CVE-2014-8361","id":"0ee5a9fb-bf1c-46a6-8d8e-bcc9895d1334","count":18303},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":13669},{"tag":"Telnet Worm","id":"a79a44da-5e82-401d-be59-1402aa84c0fd","count":12747},{"tag":"SSH Alternative Port Crawler","id":"b1859b91-92d5-48d2-b43d-bbfd09db964d","count":12446},{"tag":"Metasploit","id":"1ea048b8-81e5-4a6d-bde8-6d6fc8563a9e","count":9057},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":8780},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":6997},{"tag":"QNAP walter SSH Backdoor Attempt","id":"887a53f9-a417-4581-a46e-a9c7767d531e","count":5810},{"tag":"Looks Like Conficker","id":"ba9b892f-b089-41e7-8ade-72efbf32217c","count":5276},{"tag":"Cisco IMC Supervisor and UCS Director Backdoor","id":"5fedddae-5c7b-4d66-a993-434796ccd1c1","count":4960},{"tag":"GPON CVE-2018-10561 Router Worm","id":"56cb92ac-8fd1-4b93-846c-c15918b5fb87","count":4707}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":128770},{"operating_system":"Linux 2.4.x","count":39571},{"operating_system":"Linux 3.11+","count":35522},{"operating_system":"Linux 3.1-3.10","count":26540},{"operating_system":"Linux 3.x","count":17959},{"operating_system":"unknown","count":16870},{"operating_system":"Linux 2.4-2.6","count":16343},{"operating_system":"Windows 7/8","count":15853},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":14549},{"operating_system":"Windows 2000","count":5559},{"operating_system":"Windows XP","count":3042},{"operating_system":"Linux 2.6","count":2249},{"operating_system":"Windows NT kernel 6.x","count":272},{"operating_system":"Mac OS X 10.x","count":228},{"operating_system":"Mac OS X","count":122},{"operating_system":"FreeBSD","count":98},{"operating_system":"Linux (Android)","count":17},{"operating_system":"Linux 2.2.x","count":15},{"operating_system":"FreeBSD 8.x","count":5},{"operating_system":"Linux 2.0","count":2}],"categories":[{"category":"isp","count":254708},{"category":"hosting","count":44925},{"category":"mobile","count":11652},{"category":"business","count":11541},{"category":"education","count":744},{"category":"inactive","count":3}],"asns":[{"asn":"AS4134","count":41708},{"asn":"AS8452","count":24846},{"asn":"AS9829","count":24217},{"asn":"AS4837","count":21970},{"asn":"AS14061","count":9977},{"asn":"AS4766","count":7113},{"asn":"AS45090","count":5907},{"asn":"AS36996","count":5749},{"asn":"AS3462","count":4916},{"asn":"AS45899","count":4722},{"asn":"AS14618","count":4062},{"asn":"AS17813","count":3595},{"asn":"AS8151","count":2854},{"asn":"AS7303","count":2662},{"asn":"AS17488","count":2478},{"asn":"AS27889","count":2391},{"asn":"AS12389","count":2348},{"asn":"AS23969","count":2346},{"asn":"AS45102","count":2323},{"asn":"AS8048","count":2165}]}},"incoming_only":{"count":10019,"query":"destination_country_code:IL spoofable:false single_destination:true classification:malicious","stats":{"classifications":[{"classification":"malicious","count":10019}],"spoofable":[{"spoofable":false,"count":10019}],"organizations":[{"organization":"TE-AS","count":2730},{"organization":"TOT Public Company Limited","count":772},{"organization":"National Internet Backbone","count":497},{"organization":"CHINANET-BACKBONE","count":434},{"organization":"Telecomunicaciones MOVILNET","count":223},{"organization":"PJSC Rostelecom","count":220},{"organization":"TELEFÔNICA BRASIL S.A","count":163},{"organization":"JasTel Network International Gateway","count":161},{"organization":"Pakistan Telecommunication Company Limited","count":156},{"organization":"CAT TELECOM Public Company Ltd,CAT","count":155},{"organization":"CHINA UNICOM China169 Backbone","count":150},{"organization":"Iran Telecommunication Company PJS","count":125},{"organization":"Amazon.com, Inc.","count":124},{"organization":"True Online","count":119},{"organization":"Intersvyaz-2 JSC","count":80},{"organization":"IPXO LIMITED","count":75},{"organization":"INSTITUTE ISIRAN","count":72},{"organization":"TELEFONICA DE ESPANA S.A.U.","count":70},{"organization":"Triple T Broadband Public Company Limited","count":69},{"organization":"NTT Communications Corporation","count":68}],"actors":{},"countries":[{"country":"Egypt","count":2743},{"country":"Thailand","count":1356},{"country":"China","count":758},{"country":"India","count":651},{"country":"Russia","count":624},{"country":"Brazil","count":392},{"country":"Venezuela","count":322},{"country":"Iran","count":293},{"country":"United States","count":261},{"country":"Pakistan","count":188},{"country":"Germany","count":136},{"country":"Ukraine","count":134},{"country":"Japan","count":123},{"country":"Israel","count":119},{"country":"Vietnam","count":96},{"country":"Spain","count":94},{"country":"Indonesia","count":92},{"country":"United Kingdom","count":90},{"country":"Argentina","count":84},{"country":"Taiwan","count":76}],"source_countries":[{"country":"Egypt","count":2743},{"country":"Thailand","count":1356},{"country":"China","count":758},{"country":"India","count":651},{"country":"Russia","count":624},{"country":"Brazil","count":392},{"country":"Venezuela","count":322},{"country":"Iran","count":293},{"country":"United States","count":261},{"country":"Pakistan","count":188},{"country":"Germany","count":136},{"country":"Ukraine","count":134},{"country":"Japan","count":123},{"country":"Israel","count":119},{"country":"Vietnam","count":96},{"country":"Spain","count":94},{"country":"Indonesia","count":92},{"country":"United Kingdom","count":90},{"country":"Argentina","count":84},{"country":"Taiwan","count":76}],"destination_countries":[{"country":"Israel","count":10019}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":5702},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":2568},{"tag":"MSSQL Bruteforcer","id":"184456fa-ddb2-46aa-b7f6-32e5ac62b9bd","count":2240},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":1893},{"tag":"Realtek Miniigd UPnP Worm CVE-2014-8361","id":"0ee5a9fb-bf1c-46a6-8d8e-bcc9895d1334","count":1290},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":833},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":695},{"tag":"Metasploit","id":"1ea048b8-81e5-4a6d-bde8-6d6fc8563a9e","count":660},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":625},{"tag":"Looks Like Conficker","id":"ba9b892f-b089-41e7-8ade-72efbf32217c","count":543},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":326},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":317},{"tag":"GPON CVE-2018-10561 Router Worm","id":"56cb92ac-8fd1-4b93-846c-c15918b5fb87","count":151},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":133},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":132},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":131},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":121},{"tag":"Carries HTTP Referer","id":"79f609f0-4d07-455d-b9b1-56ff7c1a77a9","count":119},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":97},{"tag":"PHPMyAdmin Worm","id":"f7129e5c-b442-4af5-95cf-c6073a2b8443","count":96}],"operating_systems":[{"operating_system":"Linux 2.2-3.x","count":3707},{"operating_system":"Windows 7/8","count":2230},{"operating_system":"Linux 2.4.x","count":770},{"operating_system":"Linux 3.x","count":644},{"operating_system":"unknown","count":589},{"operating_system":"Windows 2000","count":503},{"operating_system":"Linux 2.4-2.6","count":388},{"operating_system":"Linux 3.1-3.10","count":386},{"operating_system":"Windows XP","count":239},{"operating_system":"Linux 3.11+","count":215},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":200},{"operating_system":"Windows NT kernel 6.x","count":105},{"operating_system":"Linux 2.6","count":30},{"operating_system":"Mac OS X","count":9},{"operating_system":"Linux 2.2.x","count":2},{"operating_system":"FreeBSD","count":1},{"operating_system":"FreeBSD 8.x","count":1}],"categories":[{"category":"isp","count":8588},{"category":"mobile","count":774},{"category":"hosting","count":421},{"category":"business","count":221},{"category":"education","count":15}],"asns":[{"asn":"AS8452","count":2730},{"asn":"AS23969","count":771},{"asn":"AS9829","count":497},{"asn":"AS4134","count":434},{"asn":"AS27889","count":223},{"asn":"AS12389","count":186},{"asn":"AS45629","count":161},{"asn":"AS17557","count":156},{"asn":"AS131090","count":155},{"asn":"AS4837","count":150},{"asn":"AS26599","count":144},{"asn":"AS58224","count":125},{"asn":"AS17552","count":119},{"asn":"AS14618","count":94},{"asn":"AS8369","count":80},{"asn":"AS206092","count":75},{"asn":"AS25306","count":72},{"asn":"AS3352","count":70},{"asn":"AS45758","count":69},{"asn":"AS45899","count":68}]}},"outgoing":{"count":1617,"query":"source_country_code:IL spoofable:false classification:malicious","stats":{"classifications":[{"classification":"malicious","count":1617}],"spoofable":[{"spoofable":false,"count":1617}],"organizations":[{"organization":"Partner Communications Ltd.","count":762},{"organization":"Cellcom Fixed Line Communication L.P","count":199},{"organization":"Bezeq International Ltd.","count":132},{"organization":"\"Bezeq\"- THE ISRAEL TELECOMMUNICATION CORP. LTD.","count":108},{"organization":"Hot-Net internet services Ltd.","count":80},{"organization":"Pelephone Communications Ltd.","count":64},{"organization":"IPXO LIMITED","count":60},{"organization":"The Constant Company, LLC","count":45},{"organization":"Mada Al-Arab General Services Company","count":22},{"organization":"CLOUD LEASE Ltd","count":20},{"organization":"ITC NG ltd","count":14},{"organization":"Datacamp Limited","count":13},{"organization":"O.M.C. COMPUTERS & COMMUNICATIONS LTD","count":11},{"organization":"Rachamim Aviel Twito trading as A.B INTERNET SOLUTIONS","count":9},{"organization":"Triple C Cloud Computing Ltd.","count":8},{"organization":"Telzar 019 International Telecommunications Services LTD","count":7},{"organization":"Interhost Communication Solutions Ltd.","count":6},{"organization":"Coolnet New Communication Provider","count":5},{"organization":"Internet Rimon LTD","count":5},{"organization":"Strong Technology, LLC.","count":5}],"actors":{},"countries":[{"country":"Israel","count":1617}],"source_countries":[{"country":"Israel","count":1617}],"destination_countries":[{"country":"United States","count":1225},{"country":"United Kingdom","count":1194},{"country":"Spain","count":804},{"country":"Israel","count":759},{"country":"Ukraine","count":755},{"country":"Turkey","count":616},{"country":"Belarus","count":593},{"country":"Indonesia","count":445},{"country":"Finland","count":433},{"country":"Latvia","count":384},{"country":"India","count":380},{"country":"Singapore","count":356},{"country":"Germany","count":350},{"country":"Canada","count":314},{"country":"Brazil","count":304},{"country":"Taiwan","count":303},{"country":"China","count":290},{"country":"Moldova","count":286},{"country":"Japan","count":264},{"country":"Poland","count":262}],"tags":[{"tag":"Mirai","id":"ef0cc90d-d80c-436f-92c5-3d8f8665c9ac","count":1074},{"tag":"Web Crawler","id":"869feaa1-dc77-4037-aee2-247b7a39cf7d","count":741},{"tag":"Huawei HG532 UPnP CVE-2017-17215 Worm","id":"84b1fb07-0687-4075-9bad-b8f4f2af387f","count":399},{"tag":"SSH Bruteforcer","id":"4454bcc7-d416-4bc9-8e85-e860c82369c2","count":276},{"tag":"Generic IoT Brute Force Attempt","id":"f620e81c-eaf4-477f-8bc4-ec94ca672615","count":217},{"tag":"Telnet Bruteforcer","id":"db896d7c-6acc-446a-9715-a8bdc2c24618","count":216},{"tag":"SSH Worm","id":"877ae200-de27-46d6-ad65-e99c6df0ac1a","count":141},{"tag":"Carries HTTP Referer","id":"79f609f0-4d07-455d-b9b1-56ff7c1a77a9","count":68},{"tag":"PHPMyAdmin Worm","id":"f7129e5c-b442-4af5-95cf-c6073a2b8443","count":61},{"tag":"Open Proxy Scanner","id":"23e6932c-e2bd-48cf-80b8-aa98ae9276c4","count":52},{"tag":"ZMap Client","id":"1d1b559f-9561-4c2c-8d8e-9ef9f670cc78","count":51},{"tag":"Looks Like RDP Worm","id":"eff6c946-77f3-47b7-ada2-0497a5791c98","count":42},{"tag":"HNAP Crawler","id":"30f72b78-316d-4f1a-832e-33098ea41d6a","count":41},{"tag":"TLS/SSL Crawler","id":"ac32bdeb-b49d-4079-9e6b-8fbca5e0addf","count":36},{"tag":"ADB Check","id":"36c75a5a-d4f8-46b3-b597-e0cbbf1ac3a0","count":35},{"tag":"SMBv1 Crawler","id":"5b840bfd-4377-4b9d-b2a2-beb8ddedc823","count":30},{"tag":"JAWS Webserver RCE","id":"55ca1afe-c8a3-4d7b-a741-81075b9f8200","count":29},{"tag":"TBK Vision DVR Auth Bypass","id":"0e8f08eb-38db-4b9a-8667-87ee83bee6b4","count":26},{"tag":"Looks Like Conficker","id":"ba9b892f-b089-41e7-8ade-72efbf32217c","count":25},{"tag":"RDP Crawler","id":"222cf79e-08a2-400a-a0b8-1c716aa43ec4","count":24}],"operating_systems":[{"operating_system":"Linux 3.1-3.10","count":467},{"operating_system":"Linux 2.2-3.x","count":407},{"operating_system":"unknown","count":400},{"operating_system":"Linux 2.4.x","count":106},{"operating_system":"Windows 2000","count":80},{"operating_system":"Linux 2.2.x-3.x (Embedded)","count":44},{"operating_system":"Linux 3.x","count":31},{"operating_system":"Linux 3.11+","count":21},{"operating_system":"Windows 7/8","count":21},{"operating_system":"Windows NT kernel 6.x","count":11},{"operating_system":"Linux 2.4-2.6","count":8},{"operating_system":"Linux 2.6","count":8},{"operating_system":"Windows XP","count":8},{"operating_system":"Mac OS X","count":5}],"categories":[{"category":"isp","count":910},{"category":"mobile","count":593},{"category":"hosting","count":108},{"category":"business","count":4}],"asns":[{"asn":"AS12400","count":762},{"asn":"AS1680","count":199},{"asn":"AS8551","count":132},{"asn":"AS6810","count":108},{"asn":"AS12849","count":80},{"asn":"AS16116","count":64},{"asn":"AS206092","count":60},{"asn":"AS20473","count":45},{"asn":"AS51407","count":22},{"asn":"AS206446","count":20},{"asn":"AS202940","count":14},{"asn":"AS212238","count":13},{"asn":"AS44709","count":10},{"asn":"AS35758","count":9},{"asn":"AS50463","count":8},{"asn":"AS51825","count":7},{"asn":"AS61102","count":6},{"asn":"AS12754","count":5},{"asn":"AS42925","count":5},{"asn":"AS62651","count":5}]}}}}