ATLAS Network AS Report: Global AS7303 (Telecom)

Network AS Report

Global AS7303 (Telecom)

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	UDP/137 (netbios-ns)	333.42 B	27.7%
	TCP/81	194.19 B	16.1%
	TCP/6667 (ircd)	190.79 B	15.9%
	TCP/139 (netbios-ssn)	119.48 B	9.9%
	TCP/5901	104.91 B	8.7%
	TCP/23 (telnet)	95.76 B	8.0%
	TCP/445 (microsoft-ds)	66.09 B	5.5%
	TCP/8555	45.19 B	3.8%
	TCP/2967	29.65 B	2.5%
	TCP/25 (smtp)	12.48 B	1.0%
	Other	11.67 B	1.0%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	Symantec Rtvscan.exe remote management exploit attempt	0.32	+100.0 %	CVE-2006-3455	27.2%
	symantec antivirus realtime virusscan overflow attempt	0.32	+100.0 %	CVE-2006-2630	27.2%
	Symantec AV realtime VirusScan overflow attempt, SYMC06-010	0.32	+100.0 %	CVE-2006-2630	27.2%
	VNC network scanning activity	0.11	+129.0 %		9.5%
	Microsoft SQL Server version buffer overflow attempt	0.07	-24.7 %	CVE-2002-0649	6.1%

Inbound Attacks	325
Outbound Attacks	530
Maximum packet rate	28.21 k pps
Maximum traffic rate	124.94 Mbps
Attack class	Misuse: 364 Profiled: 491
Attack subclass	Total Traffic: 1, : 1, Bandwidth: 2, Protocol: 2, DNS: 1,

Sources (past 24 hours)

By Country

Key	Country	Bytes per subnet	Percentage
	AR (Argentina)	1.20 kB	100.0%
	Other	0 B	0.0%

By Host

Key	Host	Bytes per subnet	Percentage
	190.31.218.229 (host229.190-31-218.telecom.net.ar)	236.90 B	19.7%
	190.31.224.56 (host56.190-31-224.telecom.net.ar)	148.09 B	12.3%
	190.136.177.42 (host42.190-136-177.telecom.net.ar)	120.01 B	10.0%
	190.139.209.229 (host229.190-139-209.telecom.net.ar)	24.28 B	2.0%
	201.253.157.146 (host146.201-253-157.telecom.net.ar)	22.07 B	1.8%
	190.31.3.127 (host127.190-31-3.telecom.net.ar)	18.00 B	1.5%
	190.31.166.191 (host191.190-31-166.telecom.net.ar)	17.24 B	1.4%
	190.31.74.82 (host82.190-31-74.telecom.net.ar)	16.89 B	1.4%
	201.252.25.131 (host131.201-252-25.telecom.net.ar)	16.16 B	1.3%
	190.136.73.138 (host138.190-136-73.telecom.net.ar)	13.87 B	1.2%
	Other	570.12 B	47.4%

By Country

Key	Country	Attacks per subnet	Percentage
	AR (Argentina)	1.19	100.0%
	Other	0.00	0.0%

By Host

Key	Host	Attacks per subnet	Percentage
	190.136.177.42 (host42.190-136-177.telecom.net.ar)	0.97	81.5%
	190.225.193.10 (host10.190-225-193.telecom.net.ar)	0.03	2.3%
	190.136.193.139 (host139.190-136-193.telecom.net.ar)	0.02	1.4%
	200.43.98.2	0.02	1.3%
	201.253.157.146 (host146.201-253-157.telecom.net.ar)	0.02	1.3%
	190.225.155.21 (host21.190-225-155.telecom.net.ar)	0.01	0.9%
	190.31.202.45 (host45.190-31-202.telecom.net.ar)	0.01	0.9%
	200.117.16.94	0.01	0.7%
	200.45.143.245 (host245.200-45-143.telecom.net.ar)	0.01	0.7%
	201.252.162.213	0.01	0.6%
	Other	0.10	8.4%

Malicious Servers (past 24 hours)

By Country

Country	Number of servers	Percentage
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
JP Morgan Chase	18	3.9%
HSBC	1	0.2%
Other	443	95.9%

By Country

Country	Phishing URLs hosted	Percentage
AR (Argentina)	462	100.0%
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
200.117.121.186 (host186.200-117-121.telecom.net.ar)	398	86.1%
200.117.57.146 (host146.200-117-57.telecom.net.ar)	37	8.0%
200.117.212.203 (host203.200-117-212.telecom.net.ar)	27	5.8%
Other	0	0.0%

Background

ASN:	AS7303 (Telecom)
Country:	AR (Argentina)
Organization:	Argentina S.A.
Registry:	LACNIC

Peer Networks

ASN
AS174 (COGENT)
AS6762 (SEABONE-NET)