ATLAS Country Report: Global Great Britain

Country Report

Global Great Britain

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	UDP/9995	6.77 kB	24.5%
	TCP/135	2.91 kB	10.5%
	ICMP/8	2.73 kB	9.9%
	TCP/23 (telnet)	2.33 kB	8.4%
	TCP/139 (netbios-ssn)	2.02 kB	7.3%
	UDP/162 (snmptrap)	1.47 kB	5.3%
	UDP/161 (snmp)	1.17 kB	4.3%
	TCP/8080 (webcache)	888.90 B	3.2%
	TCP/2967	762.02 B	2.8%
	UDP/137 (netbios-ns)	721.81 B	2.6%
	Other	5.82 kB	21.1%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	VNC network scanning activity	0.48	+107.8 %		25.1%
	Microsoft Windows RPC Bind Request buffer overflow attempt	0.36	-18.3 %	CVE-2004-0116	18.6%
	SSH brute-force login attempts	0.19	-64.7 %		9.9%
	Microsoft SQL Server version buffer overflow attempt	0.17	-56.8 %	CVE-2002-0649	8.9%
	ASN.1 constructed bit string	0.12	-53.6 %	CVE-2005-1935	6.2%

Inbound Attacks	145
Outbound Attacks	301
Maximum packet rate	210.72 k pps
Maximum traffic rate	1.99 Gbps
Attack class	Misuse: 162 Profiled: 284
Attack subclass	: 2, TCP RST: 1, TCP SYN: 1, Bandwidth: 2, Protocol: 2, DNS: 1, Total Traffic: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS34007 (PROQUOTE)	6.77 kB	24.5%
	AS2856 (BT-UK-AS)	6.38 kB	23.1%
	AS9105 (TISCALI-UK)	2.82 kB	10.2%
	AS25346 (PIPEX-AS)	1.97 kB	7.1%
	AS12513 (ECLIPSE)	1.16 kB	4.2%
	AS35736 (WUK-AS)	804.32 B	2.9%
	AS5089 (NTL)	690.38 B	2.5%
	AS25041 (BRIGHTVIEW-UK-AS)	668.39 B	2.4%
	AS4589 (EASYNET)	648.77 B	2.4%
	AS15418 (FASTHOSTS-INTERNET)	559.67 B	2.0%
	Other	5.12 kB	18.6%

By Host

Key	Host	Bytes per subnet	Percentage
	195.26.26.252	6.77 kB	24.5%
	86.154.82.37	1.64 kB	6.0%
	81.86.232.242	1.47 kB	5.3%
	217.40.103.41	1.05 kB	3.8%
	81.149.198.156 (host81-149-198-156.in-addr.btopenworld.com)	787.06 B	2.9%
	81.132.161.109	600.81 B	2.2%
	91.125.186.211	551.16 B	2.0%
	212.219.114.30	501.99 B	1.8%
	81.137.137.41 (mail.rowsehoney.co.uk)	484.05 B	1.8%
	88.109.197.62	421.50 B	1.5%
	Other	13.30 kB	48.2%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS43234 (Unknown)	0.49	25.4%
	AS2856 (BT-UK-AS)	0.42	21.8%
	AS5462 (CABLEINET)	0.25	13.0%
	AS13285 (OPALTELECOM-AS)	0.12	6.1%
	AS9105 (TISCALI-UK)	0.11	5.5%
	AS702 (Unknown)	0.09	4.6%
	AS5089 (NTL)	0.08	4.0%
	AS39477 (Unknown)	0.08	3.9%
	AS15418 (FASTHOSTS-INTERNET)	0.07	3.6%
	AS8220 (COLT)	0.06	3.4%
	Other	0.17	8.9%

By Host

Key	Host	Attacks per subnet	Percentage
	92.3.191.2	0.29	14.9%
	82.43.102.137	0.19	9.9%
	92.0.238.131 (host-92-0-238-131.as43234.net)	0.11	5.8%
	62.189.122.109	0.09	4.6%
	86.165.96.255 (host86-165-96-255.range86-165.btcentralplus.com)	0.08	4.0%
	82.113.69.4	0.08	3.9%
	217.174.241.140	0.07	3.6%
	86.158.26.129	0.07	3.5%
	80.169.138.189	0.06	3.4%
	86.161.171.173	0.06	3.0%
	Other	0.84	43.4%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS5462 (CABLEINET)	2	16.7%
AS5388 (ENERGIS-AS)	1	8.3%
AS35425 (BYTEMARK-AS)	1	8.3%
AS33970 (OPENHOSTING)	1	8.3%
AS31708 (Unknown)	1	8.3%
AS29550 (Unknown)	1	8.3%
AS28753 (NETDIRECT)	1	8.3%
AS2856 (BT-UK-AS)	1	8.3%
AS19166 (Unknown)	1	8.3%
AS15510 (Unknown)	1	8.3%
Other	1	8.3%

By Targeted Brand

Brand Name	Phished URLs	Percentage
eBay	202	11.7%
PayPal	158	9.1%
Halifax Bank	8	0.5%
Other	1364	78.8%

By ASN

ASN	Phishing URLs hosted	Percentage
AS5462 (CABLEINET)	452	26.1%
AS5089 (NTL)	399	23.0%
AS13213 (UK2NET-AS)	113	6.5%
AS5413 (AS5413)	106	6.1%
AS21788 (NOC)	91	5.3%
AS13037 (ZEN-AS)	86	5.0%
AS29131 (RAPIDSWITCH-AS)	82	4.7%
AS25346 (PIPEX-AS)	66	3.8%
AS8897 (MISTRAL)	46	2.7%
AS42831 (UKSERVERS-AS)	38	2.2%
Other	253	14.6%

By Host

Host	Phishing URLs hosted	Percentage
82.35.205.150 (82-35-205-150.cable.ubr04.enfi.blueyonder.co.uk)	426	24.6%
82.22.254.24	291	16.8%
66.96.251.135	91	5.3%
82.71.204.24	86	5.0%
78.129.205.31 (ns34.altervista.org)	71	4.1%
213.232.95.125	68	3.9%
217.154.98.130	46	2.7%
77.92.79.1	45	2.6%
194.154.164.100	45	2.6%
82.21.217.251	43	2.5%
Other	520	30.0%

Background

Internet Statistics		Date
Internet Hosts (est.)	NA	2008
Internet Users (est.)	NA	2008

Current Threat Rank
1	US (United States)
2	CN (China)
3	NL (Netherlands)
4	IL (Israel)
5	RO (Romania)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph