🛰 Наш сенсор за сутки
Suricata на боевом трафике: 2029 срабатываний, 60 уникальных атакующих IP.

Топ источников атак:
• 45[.]142[.]193[.]177 — 8 попыток · ET DROP Spamhaus DROP Listed Traffic Inbound group 8
• 45[.]148[.]10[.]188 — 8 попыток · ET DROP Dshield Block Listed Source group 1
• 85[.]11[.]167[.]7 — 8 попыток · ET DROP Spamhaus DROP Listed Traffic Inbound group 12
• 94[.]26[.]88[.]126 — 8 попыток · ET DROP Spamhaus DROP Listed Traffic Inbound group 17
• 94[.]26[.]88[.]134 — 7 попыток · ET DROP Spamhaus DROP Listed Traffic Inbound group 17
• 94[.]26[.]88[.]18 — 7 попыток · ET DROP Spamhaus DROP Listed Traffic Inbound group 17
• 18[.]119[.]209[.]50 — 6 попыток · ET CINS Active Threat Intelligence Poor Reputation IP group 20
• 18[.]190[.]15[.]50 — 6 попыток · ET CINS Active Threat Intelligence Poor Reputation IP group 20
• 18[.]217[.]208[.]51 — 6 попыток · ET CINS Active Threat Intelligence Poor Reputation IP group 20
• 204[.]76[.]203[.]213 — 6 попыток · ET DROP Spamhaus DROP Listed Traffic Inbound group 58
• 34[.]228[.]104[.]231 — 6 попыток · ET CINS Active Threat Intelligence Poor Reputation IP group 45
• 35[.]169[.]206[.]177 — 6 попыток · ET CINS Active Threat Intelligence Poor Reputation IP group 46

Топ сигнатур:
• ET DROP Dshield Block Listed Source group 1 (422)
• ET CINS Active Threat Intelligence Poor Reputation IP group 147 (150)
• ET CINS Active Threat Intelligence Poor Reputation IP group 148 (71)
• ET CINS Active Threat Intelligence Poor Reputation IP group 143 (49)
• ET DROP Spamhaus DROP Listed Traffic Inbound group 17 (39)
• ET CINS Active Threat Intelligence Poor Reputation IP group 134 (28)

First-party телеметрия. IP уже в базе поиска и экспортах (источник «Belyaev NTA»).
#сенсор #BelyaevThreatMap