[cfp-interest 3375] a sampler of active attacking subnets

[David Hough CFP]

For the morbidly curious -

Access
Count	Subnet	    WHOIS owner

  25458 138.204.48  LACNIC TURBONET INFO E TELECOM
  25115 170.78.162  LACNIC TURBONET INFO E TELECOM
  24193 138.94.53   LACNIC ANDRADE & LANDIM TELECOMUNICACOES LTDA
  15780 177.73.104  LACNIC FATIMA VIDEO ELETRONICA LTDA ME
  14546 45.165.65   LACNIC MAURILIO SANTANA DE AZEVEDO LTDA
  13090 45.164.39   LACNIC OLIVEIRA TELECOM
  13120 177.190.173 LACNIC Interlink Comunicacao Virtual LTDA ME
  12835 45.165.67   LACNIC D. S. ALVES SERVICOS DE INTERNET

  21228 45.142.193  RIPE Limited Network LTD
   2260 114.119.159 APNIC HUAWEI INTERNATIONAL PTE. LTD.

Looks like some Brazilian ISP customers are pretty lax about security;
other ISP's will take anybody's money and look the other way - 
when every host in a subnet is attacking, 
there must be some common control over that subnet.

There is a host of subnets with substantial access attempts less than
these.   HUAWEI was more active at the beginning but has since subsided.