ATLAS Country Report: Global Austria

Country Report

Global Austria

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	TCP/135	1.53 kB	29.9%
	TCP/1433 (ms-sql-s)	995.81 B	19.4%
	TCP/139 (netbios-ssn)	826.19 B	16.1%
	ICMP/8	771.73 B	15.1%
	TCP/445 (microsoft-ds)	605.99 B	11.8%
	TCP/10000	254.33 B	5.0%
	UDP/161 (snmp)	89.13 B	1.7%
	UDP/18825	8.20 B	0.2%
	UDP/137 (netbios-ns)	7.73 B	0.2%
	UDP/53 (domain)	3.13 B	0.1%
	Other	31.63 B	0.6%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	Microsoft Windows IIS Server Translate Header attempt	0.02	+357.0 %	CVE-2000-0778	16.4%
	POLICY PE EXE or DLL Windows file download	0.01	-35.2 %		12.4%
	EXPLOIT Solaris telnet USER environment vuln Attack outbound	0.01	-40.2 %		12.2%
	Solaris telnet USER environment variable login authentication bypass attempt	0.01	-40.2 %	CVE-2007-0882	12.2%
	EXPLOIT Solaris telnet USER environment vuln Attack inbound	0.01	-40.2 %		12.2%

Inbound Attacks	25
Outbound Attacks	1020
Maximum packet rate	43.84 k pps
Maximum traffic rate	475.68 Mbps
Attack class	Misuse: 191 Profiled: 854
Attack subclass	: 1, Total Traffic: 1, Bandwidth: 2, Protocol: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS8447 (TELEKOM-AT)	1.30 kB	25.4%
	AS8514 (INODE)	1.19 kB	23.3%
	AS12635 (AS12635)	915.04 B	17.9%
	AS6830 (UPC)	765.14 B	14.9%
	AS8445 (SALZBURG-AG-AS)	758.91 B	14.8%
	AS8437 (UTA-AS)	75.22 B	1.5%
	AS1257 (TELE2)	39.73 B	0.8%
	AS25447 (JM-DATA)	36.37 B	0.7%
	AS3330 (PROFINET-AT)	11.87 B	0.2%
	AS760 (University)	8.71 B	0.2%
	Other	17.77 B	0.3%

By Host

Key	Host	Bytes per subnet	Percentage
	85.124.255.166	935.90 B	18.3%
	83.64.136.157	254.33 B	5.0%
	80.108.73.118	241.26 B	4.7%
	91.114.100.140	178.09 B	3.5%
	91.115.30.168	169.62 B	3.3%
	83.215.70.72 (83-215-70-72.stjo.dyn.salzburg-online.at)	159.02 B	3.1%
	91.141.57.178	143.70 B	2.8%
	62.178.71.25	137.21 B	2.7%
	80.109.200.40	129.90 B	2.5%
	83.215.2.19	119.30 B	2.3%
	Other	2.66 kB	51.8%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS12605 (LIWEST-AT)	0.04	36.8%
	AS25447 (JM-DATA)	0.02	19.8%
	AS8445 (SALZBURG-AG-AS)	0.02	16.4%
	AS8437 (UTA-AS)	0.01	13.7%
	AS8447 (TELEKOM-AT)	0.01	12.3%
	AS8514 (INODE)	0.00	0.9%
	AS6830 (UPC)	0.00	0.1%
	AS8412 (Unknown)	0.00	0.1%
	Other	0.00	0.0%

By Host

Key	Host	Attacks per subnet	Percentage
	212.33.55.106	0.04	36.7%
	82.192.17.240	0.02	19.8%
	83.215.15.25	0.02	14.7%
	81.189.248.155	0.01	13.7%
	91.112.122.242	0.01	9.0%
	83.215.95.220	0.00	1.7%
	62.47.61.236	0.00	1.4%
	62.47.60.37	0.00	0.9%
	85.125.45.42	0.00	0.8%
	62.47.196.132	0.00	0.2%
	Other	0.00	1.2%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS41144 (FREAKSERVICES-AS)	1	100.0%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
Other	212	100.0%

By ASN

ASN	Phishing URLs hosted	Percentage
AS8514 (INODE)	111	52.4%
AS6830 (UPC)	41	19.3%
AS1901 (Unknown)	20	9.4%
AS1853 (ACONET)	20	9.4%
AS12605 (LIWEST-AT)	20	9.4%
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
85.126.171.58	82	38.7%
195.58.176.133	22	10.4%
80.108.23.8	21	9.9%
62.178.228.12	20	9.4%
212.33.32.188 (mail.sierningnet.at)	20	9.4%
193.170.198.88	20	9.4%
194.118.67.213	15	7.1%
83.64.189.157 (83.64.189.157.ip.e-secure.at)	7	3.3%
194.118.67.211	5	2.4%
Other	0	0.0%

Background

Internet Statistics		Date
Internet Hosts (est.)	2427000	2007
Internet Users (est.)	4200000	2006

Current Threat Rank
1	US (United States)
2	CN (China)
3	IL (Israel)
4	CA (Canada)
5	DE (Germany)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph