ATLAS Country Report: Global South Korea

Country Report

Global South Korea

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	ICMP/8	11.84 kB	59.4%
	TCP/139 (netbios-ssn)	3.01 kB	15.1%
	TCP/3389	1.19 kB	6.0%
	TCP/4899	1.07 kB	5.4%
	TCP/445 (microsoft-ds)	853.82 B	4.3%
	UDP/137 (netbios-ns)	712.44 B	3.6%
	TCP/135	194.51 B	1.0%
	TCP/2967	167.20 B	0.8%
	TCP/22 (ssh)	114.98 B	0.6%
	ICMP/0	97.29 B	0.5%
	Other	693.47 B	3.5%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	Microsoft Windows ASN.1 Library buffer overflow attempt	1.07	+194.3 %	CVE-2003-0818	16.9%
	POLICY PE EXE or DLL Windows file download	1.07	+194.6 %		16.9%
	ASN.1 constructed bit string	1.06	+192.9 %	CVE-2005-1935	16.8%
	EXPLOIT Solaris telnet USER environment vuln Attack inbound	0.74	-1.2 %		11.7%
	EXPLOIT Solaris telnet USER environment vuln Attack outbound	0.74	-1.2 %		11.7%

Inbound Attacks	0
Outbound Attacks	217
Maximum packet rate	142.16 k pps
Maximum traffic rate	1.48 Gbps
Attack class	Misuse: 217
Attack subclass	: 1, Total Traffic: 1, DNS: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS4766 (KIXS-AS-KR)	7.08 kB	35.5%
	AS9318 (HANARO-AS)	4.66 kB	23.4%
	AS3786 (LGDACOM)	2.73 kB	13.7%
	AS17877 (NEXG-AS-KR)	1.43 kB	7.2%
	AS17858 (KRNIC-ASBLOCK-AP)	1.05 kB	5.3%
	AS9848 (GNGAS)	513.93 B	2.6%
	AS17597 (SAEROMNET-AS-KR)	372.90 B	1.9%
	AS23578 (NAMDONGNET-AS-KR)	339.90 B	1.7%
	AS9767 (DONGBUIT-AS-KR)	335.22 B	1.7%
	AS17583 (KCNNET-AS-KR)	278.98 B	1.4%
	Other	1.15 kB	5.8%

By Host

Key	Host	Bytes per subnet	Percentage
	61.98.242.3	1.20 kB	6.0%
	61.39.134.200	1.19 kB	6.0%
	218.38.30.156	1.13 kB	5.7%
	211.232.4.171 (211-232-4-171.nexg.net)	1.09 kB	5.5%
	61.82.246.22	1.06 kB	5.3%
	122.40.138.133	886.94 B	4.4%
	211.180.95.50	610.67 B	3.1%
	58.232.64.235	522.61 B	2.6%
	61.100.58.140	343.08 B	1.7%
	211.55.33.117	342.09 B	1.7%
	Other	11.55 kB	58.0%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS17877 (NEXG-AS-KR)	2.28	36.2%
	AS9318 (HANARO-AS)	1.80	28.6%
	AS4766 (KIXS-AS-KR)	1.04	16.4%
	AS6619 (SAMSUNGNETWORKS-AS-KR)	0.17	2.7%
	AS9981 (SAERONET-AS-KR)	0.15	2.3%
	AS4663 (Unknown)	0.12	1.9%
	AS17858 (KRNIC-ASBLOCK-AP)	0.12	1.9%
	AS17854 (Unknown)	0.08	1.3%
	AS7557 (Unknown)	0.07	1.1%
	AS9848 (GNGAS)	0.07	1.1%
	Other	0.41	6.5%

By Host

Key	Host	Attacks per subnet	Percentage
	211.232.4.171 (211-232-4-171.nexg.net)	2.16	34.2%
	121.135.179.245	0.34	5.3%
	211.212.4.124	0.27	4.3%
	218.38.6.39	0.23	3.7%
	210.94.44.1	0.17	2.7%
	211.187.20.139	0.15	2.3%
	221.140.214.219	0.13	2.0%
	221.132.82.70 (221-132-82-70.nexg.net)	0.12	2.0%
	59.3.90.210	0.12	1.9%
	211.211.103.29	0.11	1.7%
	Other	2.51	39.8%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS1781 (KAIST-DAEJEON-AS-KR)	4	50.0%
AS9318 (HANARO-AS)	2	25.0%
AS9848 (GNGAS)	1	12.5%
AS9701 (KRLINE-AS)	1	12.5%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
Other	6815	100.0%

By ASN

ASN	Phishing URLs hosted	Percentage
AS4766 (KIXS-AS-KR)	3280	48.1%
AS9318 (HANARO-AS)	1805	26.5%
AS23584 (HYROADPUSAN-AS-KR)	1197	17.6%
AS9694 (SEOKYUNG-CATV-AS-KR)	302	4.4%
AS3786 (LGDACOM)	91	1.3%
AS18304 (KKUNET-AS-KR)	40	0.6%
AS9758 (Unknown)	34	0.5%
AS9701 (KRLINE-AS)	23	0.3%
AS9949 (Unknown)	22	0.3%
AS17877 (NEXG-AS-KR)	21	0.3%
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
220.125.177.110	2431	35.7%
203.227.220.26	1197	17.6%
210.205.208.191	848	12.4%
222.235.171.153	825	12.1%
61.74.42.123	426	6.3%
220.88.91.61	422	6.2%
124.153.243.165	302	4.4%
218.236.90.138	46	0.7%
211.43.212.52	44	0.6%
222.116.134.194	40	0.6%
Other	234	3.4%

Background

Internet Statistics		Date
Internet Hosts (est.)	315537	2007
Internet Users (est.)	34120000	2006

Current Threat Rank
1	US (United States)
2	CN (China)
3	NL (Netherlands)
4	IL (Israel)
5	RO (Romania)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph