ATLAS Network AS Report: Global AS3741 (IS)

Network AS Report

Global AS3741 (IS)

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	ICMP/8	22.62 kB	48.0%
	TCP/135	11.16 kB	23.7%
	UDP/137 (netbios-ns)	2.11 kB	4.5%
	UDP/53 (domain)	2.09 kB	4.4%
	TCP/445 (microsoft-ds)	1.55 kB	3.3%
	TCP/2967	1.43 kB	3.0%
	UDP/161 (snmp)	1.26 kB	2.7%
	TCP/139 (netbios-ssn)	1.15 kB	2.4%
	UDP/1024	1.04 kB	2.2%
	TCP/1433 (ms-sql-s)	992.09 B	2.1%
	Other	1.73 kB	3.7%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	RPC portmap mountd request UDP	0.14	-2.2 %		17.9%
	SSH brute-force login attempts	0.04	+940.4 %		4.7%
	DOS BGP spoofed connection reset attempt	0.01	-22.2 %	CVE-2004-0230	1.0%
	MYSQL brute-force login attempts	0.01	+8403.5 %		0.9%

Inbound Attacks	0
Outbound Attacks	2
Maximum packet rate	456 pps
Maximum traffic rate	1.26 Mbps
Attack class	Profiled: 2
Attack subclass	Protocol: 1,

Sources (past 24 hours)

By Country

Key	Country	Bytes per subnet	Percentage
	ZA (South Africa)	47.13 kB	100.0%
	Other	0 B	0.0%

By Host

Key	Host	Bytes per subnet	Percentage
	196.35.141.180	2.95 kB	6.3%
	196.208.62.253 (s3-gw-253.dial-up.net)	1.54 kB	3.3%
	196.208.109.171	1.11 kB	2.4%
	196.208.66.29	1.06 kB	2.2%
	196.209.26.44 (196-209-26-44-nngy-esr-2.dynamic.isadsl.co.za)	1.03 kB	2.2%
	196.208.88.168	877.76 B	1.9%
	196.209.104.52 (196-209-104-52-wblv-esr-3.dynamic.isadsl.co.za)	825.40 B	1.8%
	196.23.0.34 (statix.isnet.net)	823.42 B	1.7%
	196.23.0.14 (turnkey.is.co.za)	763.47 B	1.6%
	196.23.250.89 (c4-89-2.pta.dial.mweb.co.za)	708.78 B	1.5%
	Other	35.44 kB	75.2%

By Country

Key	Country	Attacks per subnet	Percentage
	ZA (South Africa)	0.79	100.0%
	Other	0.00	0.0%

By Host

Key	Host	Attacks per subnet	Percentage
	168.209.255.251 (core1a-rba-lo0.ip.isnet.net)	0.18	22.5%
	168.209.255.43 (core2a-rba-lo0.ip.isnet.net)	0.17	21.0%
	196.14.248.146	0.14	17.9%
	168.209.255.250	0.04	5.1%
	168.209.255.160 (core1a-bry-lo0.ip.isnet.net)	0.04	4.4%
	196.36.87.2 (track3.tracker.co.za)	0.03	4.3%
	168.209.255.161 (core2a-bry-lo0.ip.isnet.net)	0.03	4.2%
	168.209.255.200 (core2-dbn-lo0.ip.isnet.net)	0.03	3.9%
	168.209.255.201 (core1-dbn-lo0.ip.isnet.net)	0.03	3.8%
	168.209.255.31 (ch9-rba-lo0.ip.isnet.net)	0.03	3.4%
	Other	0.07	9.4%

Malicious Servers (past 24 hours)

By Country

Country	Number of servers	Percentage
ZA (South Africa)	1	100.0%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
Other	0	0.0%

By Country

Country	Phishing URLs hosted	Percentage
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
Other	0	0.0%

Background

ASN:	AS3741 (IS)
Country:	ZA (South Africa)
Organization:	IS
Registry:	AFRINIC

Peer Networks

ASN
AS174 (COGENT)
AS1273 (CW)
AS2516 (Unknown)
AS2914 (NTT-COMMUNICATIONS-2914)
AS7018 (ATT-INTERNET4)
AS10310 (Unknown)