ATLAS Country Report: Global India

Country Report

Global India

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	UDP/1434 (ms-sql-m)	2.80 kB	36.2%
	TCP/22 (ssh)	1.58 kB	20.4%
	TCP/8080 (webcache)	1.05 kB	13.5%
	UDP/137 (netbios-ns)	911.67 B	11.8%
	ICMP/8	471.10 B	6.1%
	TCP/139 (netbios-ssn)	210.56 B	2.7%
	TCP/445 (microsoft-ds)	205.34 B	2.7%
	TCP/23 (telnet)	109.18 B	1.4%
	TCP/135	106.29 B	1.4%
	TCP/25 (smtp)	75.33 B	1.0%
	Other	230.42 B	3.0%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	Microsoft SQL Server version buffer overflow attempt	2.40	+77.0 %	CVE-2002-0649	58.5%
	SSH brute-force login attempts	0.99	+97.8 %		24.1%
	EXPLOIT Solaris telnet USER environment vuln Attack inbound	0.16	-17.3 %		4.0%
	Solaris telnet USER environment variable login authentication bypass attempt	0.16	-17.3 %	CVE-2007-0882	4.0%
	EXPLOIT Solaris telnet USER environment vuln Attack outbound	0.16	-17.3 %		4.0%

Inbound Attacks	85
Outbound Attacks	5078
Maximum packet rate	2.90 M pps
Maximum traffic rate	1.77 Gbps
Attack class	Misuse: 5152 Profiled: 11
Attack subclass	: 1, Bandwidth: 1, Protocol: 1, DNS: 2, TCP SYN: 2,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS17447 (NET4INDIA)	2.74 kB	35.3%
	AS4755 (VSNL-AS)	1.58 kB	20.4%
	AS7633 (SOFTNET-AS-AP)	1.00 kB	12.9%
	AS9498 (BBIL-AP)	790.19 B	10.2%
	AS9829 (BSNL-NIB)	541.24 B	7.0%
	AS17813 (MTNL-AP)	338.89 B	4.4%
	AS17818 (SABINFOTECH-IN-AP)	271.18 B	3.5%
	AS9583 (SIFY-AS-IN)	86.94 B	1.1%
	AS18231 (EXATT-AS-AP)	85.66 B	1.1%
	AS36024 (COLO4-CO)	62.11 B	0.8%
	Other	253.38 B	3.3%

By Host

Key	Host	Bytes per subnet	Percentage
	202.71.156.172	2.73 kB	35.3%
	121.241.184.162	1.22 kB	15.7%
	196.12.36.244	1.00 kB	12.9%
	202.131.118.106	271.18 B	3.5%
	59.176.83.38	164.68 B	2.1%
	61.246.36.151	97.83 B	1.3%
	202.56.240.13	82.42 B	1.1%
	61.95.159.11	67.99 B	0.9%
	207.210.233.190	62.11 B	0.8%
	219.83.137.6	59.73 B	0.8%
	Other	1.99 kB	25.7%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS17447 (NET4INDIA)	2.00	48.7%
	AS4755 (VSNL-AS)	0.63	15.3%
	AS9498 (BBIL-AP)	0.39	9.6%
	AS17818 (SABINFOTECH-IN-AP)	0.24	6.0%
	AS9829 (BSNL-NIB)	0.24	5.9%
	AS17771 (Unknown)	0.15	3.8%
	AS24560 (Unknown)	0.11	2.6%
	AS24186 (Unknown)	0.09	2.3%
	AS17813 (MTNL-AP)	0.09	2.2%
	AS24397 (Unknown)	0.05	1.2%
	Other	0.10	2.5%

By Host

Key	Host	Attacks per subnet	Percentage
	202.71.156.172 (mail.vicisoft.com)	1.92	46.7%
	121.241.184.162 (121.241.184.162.static-pune.vsnl.net.in)	0.49	12.0%
	202.131.118.106	0.24	6.0%
	202.63.124.36	0.15	3.8%
	203.153.33.82	0.09	2.3%
	59.162.218.113	0.07	1.7%
	125.17.105.121	0.07	1.6%
	61.8.153.247	0.06	1.6%
	125.19.50.194	0.06	1.6%
	61.95.207.81	0.06	1.5%
	Other	0.88	21.3%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS23522 (IPNAP-ES)	2	50.0%
AS4755 (VSNL-AS)	1	25.0%
AS18101 (RIL-IDC)	1	25.0%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
Other	244	100.0%

By ASN

ASN	Phishing URLs hosted	Percentage
AS17488 (Unknown)	109	44.7%
AS2697 (Unknown)	61	25.0%
AS18101 (RIL-IDC)	24	9.8%
AS9829 (BSNL-NIB)	22	9.0%
AS703 (Unknown)	14	5.7%
AS17439 (Unknown)	14	5.7%
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
60.254.33.5	75	30.7%
202.141.117.34	61	25.0%
125.99.121.112	34	13.9%
218.248.18.54	22	9.0%
202.138.97.198	22	9.0%
202.87.40.243	14	5.7%
202.80.60.20	14	5.7%
202.138.97.203	2	0.8%
Other	0	0.0%

Background

Internet Statistics		Date
Internet Hosts (est.)	2306000	2007
Internet Users (est.)	60000000	2005

Current Threat Rank
1	US (United States)
2	CN (China)
3	NL (Netherlands)
4	IL (Israel)
5	RO (Romania)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph