ATLAS Country Report: Global Germany

Country Report

Global Germany

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	TCP/135	34.70 kB	57.6%
	TCP/445 (microsoft-ds)	14.13 kB	23.4%
	TCP/1433 (ms-sql-s)	3.70 kB	6.1%
	TCP/139 (netbios-ssn)	1.20 kB	2.0%
	TCP/1080 (socks)	1.15 kB	1.9%
	TCP/10000	988.70 B	1.6%
	ICMP/8	742.71 B	1.2%
	UDP/137 (netbios-ns)	706.93 B	1.2%
	TCP/80 (http)	565.21 B	0.9%
	TCP/22 (ssh)	361.43 B	0.6%
	Other	2.00 kB	3.3%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	MYSQL brute-force login attempts	4.85	+255.5 %		60.3%
	Microsoft SQL Server version buffer overflow attempt	0.84	+18.9 %	CVE-2002-0649	10.5%
	SSH brute-force login attempts	0.60	-15.9 %		7.4%
	ASN.1 constructed bit string	0.52	-31.0 %	CVE-2005-1935	6.5%
	Microsoft Windows ASN.1 Library buffer overflow attempt	0.52	-32.8 %	CVE-2003-0818	6.5%

Inbound Attacks	549
Outbound Attacks	829
Maximum packet rate	1.40 M pps
Maximum traffic rate	2.40 Gbps
Attack class	Misuse: 393 Profiled: 959 Fingerprint: 26
Attack subclass	: 2, TCP SYN: 2, Bandwidth: 2, Protocol: 2, DNS: 1, Total Traffic: 2,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS3320 (DTAG)	46.55 kB	77.3%
	AS33984 (SURFPLANET-AS)	3.11 kB	5.2%
	AS20676 (QSC-1)	1.23 kB	2.0%
	AS8560 (ONEANDONE-AS)	1.18 kB	2.0%
	AS31103 (KEYWEB-AS)	1.18 kB	2.0%
	AS5430 (FREENETDE)	1.06 kB	1.8%
	AS29562 (KABELBW-ASN)	1.03 kB	1.7%
	AS31334 (KABELDEUTSCHLAND-AS)	646.63 B	1.1%
	AS3209 (Arcor)	597.38 B	1.0%
	AS8422 (NETCOLOGNE)	464.93 B	0.8%
	Other	3.20 kB	5.3%

By Host

Key	Host	Bytes per subnet	Percentage
	85.88.18.104	3.11 kB	5.2%
	83.236.136.82 (port-83-236-136-82.static.qsc.de)	1.21 kB	2.0%
	87.118.118.38	1.17 kB	1.9%
	87.106.184.203	1.03 kB	1.7%
	91.18.211.112 (p5B12D370.dip.t-dialin.net)	964.60 B	1.6%
	91.63.77.243	816.31 B	1.4%
	91.21.202.144	808.67 B	1.3%
	91.15.242.15	795.19 B	1.3%
	91.18.245.139	786.86 B	1.3%
	91.4.124.177	708.35 B	1.2%
	Other	48.85 kB	81.1%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS3209 (Arcor)	5.35	66.5%
	AS3320 (DTAG)	0.84	10.4%
	AS5430 (FREENETDE)	0.44	5.5%
	AS31334 (KABELDEUTSCHLAND-AS)	0.22	2.8%
	AS24900 (IPX-SERVER)	0.21	2.6%
	AS8767 (MNET-AS)	0.21	2.6%
	AS6400 (Unknown)	0.20	2.5%
	AS6805 (TDDE-ASN1)	0.13	1.6%
	AS43483 (Unknown)	0.09	1.1%
	AS8560 (ONEANDONE-AS)	0.06	0.8%
	Other	0.30	3.7%

By Host

Key	Host	Attacks per subnet	Percentage
	84.56.244.76 (dslb-084-056-244-076.pools.arcor-ip.net)	4.50	56.0%
	89.48.151.248	0.37	4.6%
	213.23.171.37 (dialbs-213-023-171-037.static.arcor-ip.net)	0.34	4.2%
	88.64.144.174	0.29	3.6%
	193.159.165.121	0.26	3.2%
	80.190.246.181	0.21	2.6%
	62.245.156.43 (host-62-245-156-43.customer.m-online.net)	0.21	2.6%
	196.3.83.53	0.20	2.5%
	88.134.147.191 (88-134-147-191-dynip.superkabel.de)	0.16	1.9%
	84.163.67.115	0.12	1.5%
	Other	1.38	17.2%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS31400 (Unknown)	6	15.8%
AS6724 (Unknown)	5	13.2%
AS34309 (Unknown)	5	13.2%
AS31103 (KEYWEB-AS)	5	13.2%
AS12312 (Unknown)	3	7.9%
AS8972 (PLUSSERVER-AS)	2	5.3%
AS31530 (Unknown)	2	5.3%
AS24989 (Unknown)	2	5.3%
AS13301 (Unknown)	2	5.3%
AS8560 (ONEANDONE-AS)	1	2.6%
Other	5	13.2%

By Targeted Brand

Brand Name	Phished URLs	Percentage
PayPal	343	5.5%
eBay	56	0.9%
Halifax Bank	40	0.6%
JP Morgan Chase	18	0.3%
Other	5765	92.7%

By ASN

ASN	Phishing URLs hosted	Percentage
AS12306 (PLUSLINE)	3880	62.4%
AS24940 (Unknown)	425	6.8%
AS12832 (Unknown)	296	4.8%
AS15598 (Unknown)	283	4.5%
AS6724 (Unknown)	169	2.7%
AS3209 (Arcor)	97	1.6%
AS13301 (Unknown)	86	1.4%
AS3356 (LEVEL3)	85	1.4%
AS31103 (KEYWEB-AS)	79	1.3%
AS3320 (DTAG)	65	1.0%
Other	757	12.2%

By Host

Host	Phishing URLs hosted	Percentage
82.98.86.166	1015	16.3%
82.98.86.165 (www165.sedoparking.com)	902	14.5%
82.98.86.161 (www161.sedoparking.com)	900	14.5%
82.98.86.162 (www162.sedoparking.com)	419	6.7%
82.98.86.164 (www164.sedoparking.com)	379	6.1%
213.193.4.11 (members-tmm.vip.lyceu.net)	296	4.8%
80.190.202.41 (homepage-baukasten.de)	283	4.5%
82.98.86.170 (www170.sedoparking.com)	240	3.9%
213.239.203.47 (213-239-203-47.clients.your-server.de)	173	2.8%
84.58.189.56 (dslb-084-058-189-056.pools.arcor-ip.net)	77	1.2%
Other	1538	24.7%

Background

Internet Statistics		Date
Internet Hosts (est.)	16494000	2007
Internet Users (est.)	38600000	2006

Current Threat Rank
1	US (United States)
2	CN (China)
3	IL (Israel)
4	CA (Canada)
5	DE (Germany)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph