ATLAS Country Report: Global Israel

Country Report

Global Israel

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	TCP/139 (netbios-ssn)	647.12 B	22.9%
	TCP/445 (microsoft-ds)	638.38 B	22.6%
	ICMP/8	478.25 B	16.9%
	UDP/137 (netbios-ns)	343.15 B	12.1%
	TCP/3306 (mysql)	258.54 B	9.1%
	TCP/4899	225.27 B	8.0%
	TCP/23 (telnet)	89.49 B	3.2%
	TCP/22 (ssh)	55.34 B	2.0%
	TCP/135	31.92 B	1.1%
	TCP/5900	13.10 B	0.5%
	Other	49.97 B	1.8%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	MYSQL brute-force login attempts	4.31	+79.3 %		89.3%
	ASN.1 constructed bit string	0.12	+29.3 %	CVE-2005-1935	2.4%
	POLICY PE EXE or DLL Windows file download	0.11	+144.1 %		2.4%
	Microsoft Windows ASN.1 Library buffer overflow attempt	0.11	+43.2 %	CVE-2003-0818	2.3%
	VNC network scanning activity	0.06	+16993.0 %		1.2%

Inbound Attacks	0
Outbound Attacks	14
Maximum packet rate	30.77 k pps
Maximum traffic rate	12.41 Mbps
Attack class	Misuse: 1 Profiled: 13
Attack subclass	Bandwidth: 1, Protocol: 1, TCP SYN: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS1680 (NetVision)	1.28 kB	45.4%
	AS5486 (SMILE-ASN)	670.17 B	23.7%
	AS8551 (BEZEQ-INTERNATIONAL-AS)	392.49 B	13.9%
	AS8584 (BARAK)	325.48 B	11.5%
	AS9116 (GOLDENLINES-ASN)	140.01 B	4.9%
	AS28833 (EILATINTER-AS)	5.25 B	0.2%
	AS25003 (QOS)	4.24 B	0.1%
	AS3561 (Unknown)	1.35 B	0.0%
	AS378 (MACHBA-AS)	0.72 B	0.0%
	Other	7.08 B	0.2%

By Host

Key	Host	Bytes per subnet	Percentage
	85.250.51.30	927.39 B	32.8%
	213.8.95.4	478.85 B	16.9%
	62.90.100.135	310.26 B	11.0%
	84.109.126.199	197.00 B	7.0%
	89.139.154.192	132.51 B	4.7%
	80.230.78.114	125.77 B	4.4%
	79.182.144.162	65.99 B	2.3%
	62.219.114.85	55.52 B	2.0%
	213.8.171.160	55.30 B	2.0%
	89.138.196.65	46.48 B	1.6%
	Other	435.47 B	15.4%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS1680 (NetVision)	2.35	48.7%
	AS5486 (SMILE-ASN)	2.17	44.8%
	AS8584 (BARAK)	0.17	3.5%
	AS8551 (BEZEQ-INTERNATIONAL-AS)	0.13	2.8%
	AS9116 (GOLDENLINES-ASN)	0.01	0.1%
	AS20623 (SAFELINES)	0.00	0.0%
	Other	0.00	0.0%

By Host

Key	Host	Attacks per subnet	Percentage
	89.139.154.192 (89-139-154-192.bb.netvision.net.il)	2.18	45.1%
	80.230.78.114 (IGLD-80-230-78-114.inter.net.il)	2.06	42.6%
	62.90.100.135 (62-90-100-135.barak.net.il)	0.17	3.5%
	85.250.51.30 (85-250-51-30.bb.netvision.net.il)	0.17	3.5%
	192.116.236.130	0.08	1.7%
	79.182.149.113	0.05	1.1%
	82.81.250.41	0.03	0.6%
	79.177.15.54	0.02	0.5%
	79.179.107.144	0.02	0.4%
	213.8.132.142	0.01	0.2%
	Other	0.04	0.8%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS9116 (GOLDENLINES-ASN)	3	30.0%
AS8584 (BARAK)	3	30.0%
AS5486 (SMILE-ASN)	3	30.0%
AS8551 (BEZEQ-INTERNATIONAL-AS)	1	10.0%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
JP Morgan Chase	1738	8.4%
HSBC	16	0.1%
Other	18922	91.5%

By ASN

ASN	Phishing URLs hosted	Percentage
AS1680 (NetVision)	8896	43.0%
AS8551 (BEZEQ-INTERNATIONAL-AS)	4928	23.8%
AS9116 (GOLDENLINES-ASN)	3755	18.2%
AS8584 (BARAK)	2820	13.6%
AS5486 (SMILE-ASN)	277	1.3%
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
89.139.185.38	3203	15.5%
77.127.25.223	2024	9.8%
89.138.26.177	1291	6.2%
89.139.200.19	1167	5.6%
84.109.79.139	756	3.7%
85.65.14.33	730	3.5%
84.109.109.109	565	2.7%
87.69.83.115	478	2.3%
84.109.118.84	475	2.3%
82.81.158.36	433	2.1%
Other	9554	46.2%

Background

Internet Statistics		Date
Internet Hosts (est.)	671030	2007
Internet Users (est.)	1899000	2006

Current Threat Rank
1	US (United States)
2	CN (China)
3	IL (Israel)
4	CA (Canada)
5	DE (Germany)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph