ATLAS Attack Report: Global MYSQL brute-force login attempts

Attack Report

Global MYSQL brute-force login attempts

View:
Activity
Sources

Output:
Print
XML
CSV

Activity (past 24 hours)

By Service

Key	Service	Attacks per subnet	Percentage
	TCP/3306 (mysql)	18.13	100.0%
	Other	0.00	0.0%

Sources (past 24 hours)

By Country

Key	Country	Attacks per subnet	Percentage
	DE (Germany)	4.85	26.7%
	IL (Israel)	4.31	23.8%
	UA (Ukraine)	1.91	10.5%
	MA (Morocco)	1.39	7.7%
	RO (Romania)	1.14	6.3%
	FR (France)	0.94	5.2%
	HU (Hungary)	0.57	3.2%
	BE (Belgium)	0.55	3.0%
	GB (Great Britain)	0.45	2.5%
	SI (Slovenia)	0.41	2.3%
	Other	1.61	8.9%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS3209 (Arcor)	4.81	26.5%
	AS1680 (NetVision)	2.18	12.0%
	AS5486 (SMILE-ASN)	2.08	11.5%
	AS6849 (UKRTELNET)	1.91	10.5%
	AS6713 (IAM-AS)	1.39	7.7%
	AS8708 (RDSNET)	1.11	6.1%
	AS3215 (AS3215)	0.85	4.7%
	AS8462 (CORYNET1)	0.56	3.1%
	AS5432 (BELGACOM-SKYNET-AS)	0.55	3.0%
	AS3212 (TRIERA)	0.36	2.0%
	Other	2.34	12.9%

By Host

Key	Host	Attacks per subnet	Percentage
	84.56.244.76 (dslb-084-056-244-076.pools.arcor-ip.net)	4.50	24.8%
	89.139.154.192 (89-139-154-192.bb.netvision.net.il)	2.18	12.0%
	80.230.78.114 (IGLD-80-230-78-114.inter.net.il)	2.06	11.3%
	41.249.17.39	1.15	6.3%
	92.112.66.238 (238-66-112-92.pool.ukrtel.net)	0.99	5.5%
	92.112.66.14 (14-66-112-92.pool.ukrtel.net)	0.92	5.1%
	79.117.34.226 (79-117-34-226.rdsnet.ro)	0.59	3.3%
	212.16.130.118	0.56	3.1%
	86.198.152.52 (ALille-154-1-33-52.w86-198.abo.wanadoo.fr)	0.54	3.0%
	91.176.106.251 (251.106-176-91.adsl-dyn.isp.belgacom.be)	0.54	3.0%
	Other	4.10	22.6%

Background

Description

MYSQL brute-force login attempts