ATLAS Country Report: Global Canada

Country Report

Global Canada

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	ICMP/8	4.96 kB	38.2%
	TCP/21 (ftp)	922.05 B	7.1%
	TCP/6667 (ircd)	731.84 B	5.6%
	TCP/80 (http)	592.96 B	4.6%
	TCP/139 (netbios-ssn)	561.62 B	4.3%
	TCP/445 (microsoft-ds)	489.31 B	3.8%
	TCP/22 (ssh)	422.43 B	3.3%
	UDP/137 (netbios-ns)	374.55 B	2.9%
	TCP/3306 (mysql)	276.34 B	2.1%
	UDP/53 (domain)	137.71 B	1.1%
	Other	3.52 kB	27.1%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	Microsoft Windows RPC Messenger Service pop-up spam	55.23	-8.3 %		93.9%
	SSH brute-force login attempts	1.38	+4506.1 %		2.3%
	ASN.1 constructed bit string	0.47	-68.2 %	CVE-2005-1935	0.8%
	Microsoft Windows ASN.1 Library buffer overflow attempt	0.47	-69.0 %	CVE-2003-0818	0.8%
	POLICY PE EXE or DLL Windows file download	0.42	-71.3 %		0.7%

Inbound Attacks	1668
Outbound Attacks	804
Maximum packet rate	139.25 k pps
Maximum traffic rate	116.87 Mbps
Attack class	Misuse: 33 Profiled: 2439
Attack subclass	Total Traffic: 1, Bandwidth: 2, Protocol: 2, TCP SYN: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS32613 (IWEB-AS)	3.07 kB	23.6%
	AS6327 (SHAW)	1.87 kB	14.4%
	AS577 (BACOM)	1.54 kB	11.9%
	AS15290 (Unknown)	944.97 B	7.3%
	AS5769 (VIDEOTRON)	837.93 B	6.5%
	AS812 (ROGERS-CABLE)	785.49 B	6.1%
	AS11260 (EASTLINK-HSI)	660.30 B	5.1%
	AS30256 (ACADIAU)	590.90 B	4.6%
	AS11290 (RAPIDUS)	495.57 B	3.8%
	AS22622 (MIPPS-INC)	413.54 B	3.2%
	Other	1.77 kB	13.6%

By Host

Key	Host	Bytes per subnet	Percentage
	67.205.103.134 (ip-67-205-103-134.static.privatedns.com)	3.07 kB	23.6%
	69.159.240.6 (MTLXPQAK-1168109574.sdsl.bell.ca)	940.17 B	7.2%
	216.191.16.13	922.05 B	7.1%
	68.146.98.211	759.89 B	5.9%
	70.69.169.74	605.96 B	4.7%
	205.189.197.66	413.54 B	3.2%
	64.10.60.155	403.71 B	3.1%
	99.237.106.230 (CPE000c6e720de8-CM00122570af68.cpe.net.cable.rogers.com)	388.76 B	3.0%
	99.229.72.91 (CPE001b11cc7ac9-CM00159a3f0128.cpe.net.cable.rogers.com)	343.07 B	2.6%
	24.200.31.15 (modemcable015.31-200-24.mc.videotron.ca)	339.95 B	2.6%
	Other	4.80 kB	37.0%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS6327 (SHAW)	55.86	94.9%
	AS22622 (MIPPS-INC)	1.38	2.3%
	AS26788 (BLINK-AS2)	0.72	1.2%
	AS577 (BACOM)	0.42	0.7%
	AS36676 (Unknown)	0.13	0.2%
	AS3359 (Unknown)	0.07	0.1%
	AS29773 (Unknown)	0.06	0.1%
	AS5769 (VIDEOTRON)	0.05	0.1%
	AS855 (Unknown)	0.04	0.1%
	AS14366 (MTNCABLE)	0.03	0.1%
	Other	0.07	0.1%

By Host

Key	Host	Attacks per subnet	Percentage
	205.189.197.66 (smtp.mipps.net)	1.38	2.3%
	199.43.180.9	0.72	1.2%
	69.159.240.6 (MTLXPQAK-1168109574.sdsl.bell.ca)	0.29	0.5%
	68.146.98.211 (S01060008023fc44e.cg.shawcable.net)	0.14	0.2%
	69.42.50.202 (69.42.50.202.scratchtelecom.com)	0.13	0.2%
	68.148.100.152	0.10	0.2%
	142.44.2.7	0.09	0.2%
	24.66.55.199 (S010600173f65421f.mh.shawcable.net)	0.08	0.1%
	24.64.238.254 (S0106000bdb86bea7.cg.shawcable.net)	0.08	0.1%
	129.128.241.214	0.07	0.1%
	Other	55.76	94.8%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS23522 (Unknown)	57	89.1%
AS36666 (Unknown)	3	4.7%
AS32613 (IWEB-AS)	2	3.1%
AS701 (UUNET)	1	1.6%
AS6327 (SHAW)	1	1.6%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
PayPal	174	1.4%
eBay	76	0.6%
Wells Fargo	33	0.3%
Halifax Bank	22	0.2%
HSBC	18	0.1%
Other	12308	97.4%

By ASN

ASN	Phishing URLs hosted	Percentage
AS6327 (SHAW)	8548	67.7%
AS812 (ROGERS-CABLE)	2873	22.7%
AS174 (COGENT)	168	1.3%
AS7992 (COGECOWAVE)	142	1.1%
AS577 (BACOM)	106	0.8%
AS13768 (PEER1)	102	0.8%
AS33139 (Unknown)	100	0.8%
AS13727 (ND-CA-ASN)	89	0.7%
AS19875 (IPWORLDNET)	64	0.5%
AS6407 (Unknown)	62	0.5%
Other	377	3.0%

By Host

Host	Phishing URLs hosted	Percentage
24.67.76.15 (S0106001372d1b72d.ok.shawcable.net)	5653	44.8%
70.76.7.142	2874	22.8%
99.234.127.147	853	6.8%
99.229.201.131	838	6.6%
99.246.143.63 (CPE00a0d1b99924-CM001a66712872.cpe.net.cable.rogers.com)	640	5.1%
99.227.127.92 (CPE006094515ad5-CM0012c90f9f92.cpe.net.cable.rogers.com)	230	1.8%
99.227.137.141	169	1.3%
99.239.128.14 (CPE00111154cb41-CM00122502467c.cpe.net.cable.rogers.com)	123	1.0%
67.193.236.234 (d193-236-234.home3.cgocable.net)	120	1.0%
216.8.179.23 (ptr-216-8-179-23.ptr.nextdimensioninc.com)	89	0.7%
Other	1042	8.2%

Background

Internet Statistics		Date
Internet Hosts (est.)	4196000	2007
Internet Users (est.)	22000000	2005

Current Threat Rank
1	US (United States)
2	CN (China)
3	CA (Canada)
4	DE (Germany)
5	NL (Netherlands)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph