ATLAS Country Report: Global Belgium

Country Report

Global Belgium

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	ICMP/8	20.88 kB	36.0%
	TCP/135	12.53 kB	21.6%
	TCP/139 (netbios-ssn)	8.08 kB	13.9%
	TCP/445 (microsoft-ds)	7.22 kB	12.4%
	TCP/23 (telnet)	1.99 kB	3.4%
	TCP/2967	1.95 kB	3.4%
	TCP/1433 (ms-sql-s)	1.67 kB	2.9%
	UDP/53 (domain)	841.17 B	1.5%
	UDP/137 (netbios-ns)	567.79 B	1.0%
	TCP/80 (http)	366.28 B	0.6%
	Other	1.88 kB	3.2%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	Microsoft Windows ASN.1 Library buffer overflow attempt	9.11	+68.2 %	CVE-2003-0818	43.4%
	ASN.1 constructed bit string	9.07	+69.8 %	CVE-2005-1935	43.2%
	Microsoft Windows Server Service buffer overflow attempt	0.89	+256.4 %	CVE-2006-3439	4.3%
	SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt	0.84	+220.6 %	CVE-2006-3439	4.0%
	MYSQL brute-force login attempts	0.52	+101.0 %		2.5%

Inbound Attacks	46
Outbound Attacks	140
Maximum packet rate	14.69 k pps
Maximum traffic rate	118.13 Mbps
Attack class	Misuse: 128 Profiled: 58
Attack subclass	Protocol: 2, Bandwidth: 1, Total Traffic: 1, DNS: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS5432 (BELGACOM-SKYNET-AS)	55.03 kB	94.9%
	AS6848 (TELENET-AS)	1.20 kB	2.1%
	AS12493 (AS12493)	371.94 B	0.6%
	AS9031 (INTICONET)	329.98 B	0.6%
	AS41451 (Unknown)	233.98 B	0.4%
	AS42018 (HOSTBASKET-BACKBONE)	203.19 B	0.4%
	AS3304 (SCARLET)	169.25 B	0.3%
	AS13127 (VERSATEL)	161.59 B	0.3%
	AS29587 (SCHEDOM-AS)	133.61 B	0.2%
	AS21502 (ASN-NUMERICABLE)	38.44 B	0.1%
	Other	110.80 B	0.2%

By Host

Key	Host	Bytes per subnet	Percentage
	91.178.60.175 (175.60-178-91.adsl-dyn.isp.belgacom.be)	17.78 kB	30.7%
	91.176.95.50 (50.95-176-91.adsl-dyn.isp.belgacom.be)	3.27 kB	5.6%
	91.179.42.233 (233.42-179-91.adsl-dyn.isp.belgacom.be)	1.42 kB	2.5%
	81.245.147.209 (209.147-245-81.adsl-dyn.isp.belgacom.be)	802.63 B	1.4%
	91.179.46.89	790.81 B	1.4%
	91.176.243.127	749.19 B	1.3%
	91.176.246.112	702.62 B	1.2%
	91.178.74.206 (206.74-178-91.adsl-dyn.isp.belgacom.be)	663.48 B	1.1%
	91.180.8.254	660.28 B	1.1%
	91.179.52.10	641.21 B	1.1%
	Other	30.49 kB	52.6%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS5432 (BELGACOM-SKYNET-AS)	20.72	98.7%
	AS6848 (TELENET-AS)	0.17	0.8%
	AS8220 (COLT)	0.06	0.3%
	AS3304 (SCARLET)	0.04	0.2%
	AS29587 (SCHEDOM-AS)	0.00	0.0%
	AS1257 (TELE2)	0.00	0.0%
	AS12392 (Unknown)	0.00	0.0%
	AS13127 (VERSATEL)	0.00	0.0%
	AS41451 (Unknown)	0.00	0.0%
	AS12493 (AS12493)	0.00	0.0%
	Other	0.00	0.0%

By Host

Key	Host	Attacks per subnet	Percentage
	91.178.74.206 (206.74-178-91.adsl-dyn.isp.belgacom.be)	2.21	10.5%
	81.241.145.212 (212.145-241-81.adsl-dyn.isp.belgacom.be)	0.78	3.7%
	81.241.93.136	0.74	3.5%
	91.176.95.50 (50.95-176-91.adsl-dyn.isp.belgacom.be)	0.56	2.7%
	81.246.211.161	0.55	2.6%
	81.243.199.212	0.55	2.6%
	91.176.243.127 (127.243-176-91.adsl-dyn.isp.belgacom.be)	0.54	2.6%
	91.179.118.82	0.52	2.5%
	81.243.207.156	0.52	2.5%
	87.64.18.211	0.46	2.2%
	Other	13.57	64.6%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
eBay	44	66.7%
Other	22	33.3%

By ASN

ASN	Phishing URLs hosted	Percentage
AS29587 (SCHEDOM-AS)	66	100.0%
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
193.109.187.100	44	66.7%
193.109.191.187	22	33.3%
Other	0	0.0%

Background

Internet Statistics		Date
Internet Hosts (est.)	3195000	2007
Internet Users (est.)	4800000	2005

Current Threat Rank
1	CN (China)
2	US (United States)
3	IL (Israel)
4	RO (Romania)
5	IN (India)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph