ATLAS Country Report: Global Brazil

Country Report

Global Brazil

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	ICMP/8	3.62 kB	27.4%
	UDP/1434 (ms-sql-m)	2.40 kB	18.1%
	UDP/137 (netbios-ns)	1.97 kB	14.9%
	TCP/22 (ssh)	1.48 kB	11.2%
	TCP/139 (netbios-ssn)	1.23 kB	9.3%
	TCP/445 (microsoft-ds)	1.15 kB	8.7%
	TCP/5901	683.31 B	5.2%
	TCP/135	119.78 B	0.9%
	UDP/53 (domain)	67.45 B	0.5%
	TCP/25 (smtp)	65.91 B	0.5%
	Other	437.04 B	3.3%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	Microsoft SQL Server version buffer overflow attempt	1.76	+107.5 %	CVE-2002-0649	34.0%
	SSH brute-force login attempts	0.47	+46.6 %		9.1%
	POLICY Windows 98 User-Agent Detected - Possible Malware or Non-Updated System	0.43	+100.0 %		8.4%
	POLICY PE EXE or DLL Windows file download	0.43	+107.5 %		8.3%
	ASN.1 constructed bit string	0.42	+86.7 %	CVE-2005-1935	8.2%

Inbound Attacks	298
Outbound Attacks	1026
Maximum packet rate	3.05 M pps
Maximum traffic rate	11.18 Gbps
Attack class	Misuse: 708 Profiled: 616
Attack subclass	TCP RST: 1, TCP SYN: 2, Bandwidth: 2, Protocol: 2, DNS: 1, Total Traffic: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS4230 (Embratel)	3.14 kB	23.8%
	AS14463 (TDKOM)	2.38 kB	18.0%
	AS8167 (TELESC)	2.02 kB	15.3%
	AS7738 (Telecomunicacoes)	1.87 kB	14.1%
	AS27699 (TELECOMUNICACOES)	1.60 kB	12.1%
	AS10429 (Telefonica)	1.15 kB	8.7%
	AS18881 (Global)	261.36 B	2.0%
	AS19090 (Canbras)	170.12 B	1.3%
	AS28573 (NET)	104.66 B	0.8%
	AS17379 (Intelig)	101.85 B	0.8%
	Other	421.12 B	3.2%

By Host

Key	Host	Bytes per subnet	Percentage
	200.192.240.5	2.38 kB	18.0%
	189.19.29.21	1.09 kB	8.3%
	200.148.247.18	1.03 kB	7.8%
	201.73.242.37	906.41 B	6.9%
	200.203.228.107	674.50 B	5.1%
	200.182.74.2 (mail.grupolaser.com.br)	669.70 B	5.1%
	201.73.242.36	646.17 B	4.9%
	201.79.71.101	449.96 B	3.4%
	200.211.25.7	337.01 B	2.5%
	201.56.24.26	274.55 B	2.1%
	Other	4.75 kB	36.0%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS14463 (TDKOM)	1.24	24.1%
	AS4230 (Embratel)	1.11	21.5%
	AS6140 (IMPSAT-USA)	0.66	12.8%
	AS8167 (TELESC)	0.57	11.0%
	AS18881 (Global)	0.43	8.3%
	AS7738 (Telecomunicacoes)	0.31	6.0%
	AS27699 (TELECOMUNICACOES)	0.25	4.8%
	AS10429 (Telefonica)	0.19	3.6%
	AS28573 (NET)	0.17	3.2%
	AS17222 (Mundivox)	0.09	1.7%
	Other	0.16	3.0%

By Host

Key	Host	Attacks per subnet	Percentage
	200.192.240.5	1.24	24.1%
	200.186.143.106	0.66	12.8%
	201.73.242.37	0.57	11.1%
	189.30.43.154	0.44	8.5%
	201.56.24.26	0.24	4.6%
	201.22.7.39	0.18	3.6%
	201.73.56.66	0.18	3.4%
	200.148.247.18 (mail.uniquegarden.com.br)	0.17	3.4%
	189.26.108.71	0.13	2.4%
	200.201.183.50	0.09	1.7%
	Other	1.25	24.2%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS7738 (Telecomunicacoes)	1	20.0%
AS4230 (Embratel)	1	20.0%
AS27715 (Unknown)	1	20.0%
AS26592 (Unknown)	1	20.0%
AS16685 (Unknown)	1	20.0%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
Other	269	100.0%

By ASN

ASN	Phishing URLs hosted	Percentage
AS15201 (Universo)	107	39.8%
AS8167 (TELESC)	83	30.9%
AS28604 (TV)	40	14.9%
AS26592 (Unknown)	23	8.6%
AS11419 (Unknown)	11	4.1%
AS26609 (Unknown)	5	1.9%
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
201.67.198.199	83	30.9%
201.7.184.2	40	14.9%
200.98.251.12	34	12.6%
200.98.251.11	34	12.6%
200.155.23.180	23	8.6%
200.221.8.91	13	4.8%
200.221.8.78	13	4.8%
200.221.8.59	13	4.8%
200.196.254.135	11	4.1%
200.143.129.91	5	1.9%
Other	0	0.0%

Background

Internet Statistics		Date
Internet Hosts (est.)	8265000	2007
Internet Users (est.)	42600000	2006

Current Threat Rank
1	US (United States)
2	CN (China)
3	NL (Netherlands)
4	IL (Israel)
5	RO (Romania)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph