ATLAS Country Report: Global Netherlands

Country Report

Global Netherlands

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	TCP/23 (telnet)	628.61 B	21.9%
	ICMP/8	589.56 B	20.5%
	TCP/1433 (ms-sql-s)	509.21 B	17.7%
	UDP/53 (domain)	200.76 B	7.0%
	UDP/161 (snmp)	152.69 B	5.3%
	TCP/8192	144.08 B	5.0%
	TCP/80 (http)	132.63 B	4.6%
	TCP/139 (netbios-ssn)	111.37 B	3.9%
	TCP/445 (microsoft-ds)	88.07 B	3.1%
	UDP/137 (netbios-ns)	62.34 B	2.2%
	Other	253.47 B	8.8%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	ASN.1 constructed bit string	0.17	+171.0 %	CVE-2005-1935	22.9%
	Microsoft Windows ASN.1 Library buffer overflow attempt	0.17	+187.1 %	CVE-2003-0818	22.9%
	Solaris telnet USER environment variable login authentication bypass attempt	0.06	+170.1 %	CVE-2007-0882	8.1%
	EXPLOIT Solaris telnet USER environment vuln Attack inbound	0.06	+170.1 %		8.1%
	EXPLOIT Solaris telnet USER environment vuln Attack outbound	0.06	+170.1 %		8.1%

Inbound Attacks	532
Outbound Attacks	823
Maximum packet rate	588.80 k pps
Maximum traffic rate	1.37 Gbps
Attack class	Misuse: 76 Profiled: 1279
Attack subclass	: 1, Bandwidth: 2, Protocol: 2, TCP SYN: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS8737 (PT)	736.20 B	25.6%
	AS30776 (CASEMAISP-AS)	532.84 B	18.5%
	AS5615 (TISNL-BACKBONE)	238.10 B	8.3%
	AS8341 (Unknown)	235.31 B	8.2%
	AS15542 (ZEELANDNET)	230.74 B	8.0%
	AS25152 (K-ROOT-SERVER)	211.66 B	7.4%
	AS286 (KPN)	203.98 B	7.1%
	AS5390 (EURONET)	156.41 B	5.4%
	AS13127 (VERSATEL)	59.08 B	2.1%
	AS16265 (LEASEWEB)	50.35 B	1.8%
	Other	218.11 B	7.6%

By Host

Key	Host	Bytes per subnet	Percentage
	83.87.154.109 (53579A6D.cable.casema.nl)	487.23 B	17.0%
	81.205.179.188 (ip51cdb3bc.speed.planet.nl)	333.15 B	11.6%
	81.206.112.85 (ip51ce7055.adsl-surfen.hetnet.nl)	295.46 B	10.3%
	82.176.143.229 (cable-143-229.zeelandnet.nl)	230.31 B	8.0%
	82.171.31.156	225.32 B	7.8%
	82.217.248.246 (82-217-248-246.cable.quicknet.nl)	220.86 B	7.7%
	193.0.14.129 (k.root-servers.net)	211.66 B	7.4%
	62.133.110.155	114.69 B	4.0%
	85.147.0.49	78.43 B	2.7%
	81.204.252.189	77.56 B	2.7%
	Other	598.13 B	20.8%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS15435 (KABELFOON)	0.28	39.2%
	AS16237 (NXS)	0.11	15.2%
	AS30776 (CASEMAISP-AS)	0.08	10.5%
	AS8737 (PT)	0.07	9.3%
	AS9143 (ATHOME-BENELUX-BV)	0.05	6.5%
	AS286 (KPN)	0.04	5.7%
	AS5615 (TISNL-BACKBONE)	0.03	3.9%
	AS12871 (Unknown)	0.03	3.9%
	AS5390 (EURONET)	0.02	2.3%
	AS8341 (Unknown)	0.01	1.5%
	Other	0.01	2.0%

By Host

Key	Host	Attacks per subnet	Percentage
	83.128.59.94	0.28	39.2%
	217.148.83.175	0.11	15.2%
	77.160.102.160	0.07	9.0%
	62.133.110.155	0.04	5.6%
	82.75.203.204	0.03	3.9%
	85.113.252.135	0.03	3.9%
	82.171.31.156 (82-171-31-156.ip.telfort.nl)	0.03	3.7%
	83.82.250.88	0.02	3.2%
	83.82.218.163	0.02	2.5%
	83.84.67.90	0.02	2.2%
	Other	0.08	11.6%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS16265 (LEASEWEB)	5	55.6%
AS8341 (Unknown)	1	11.1%
AS39704 (CJ2-AS)	1	11.1%
AS25525 (REASONNET)	1	11.1%
AS12989 (Unknown)	1	11.1%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
eBay	33	1.0%
PayPal	25	0.7%
HSBC	25	0.7%
Wells Fargo	21	0.6%
Bank of America	19	0.6%
Other	3325	96.4%

By ASN

ASN	Phishing URLs hosted	Percentage
AS8737 (PT)	1965	57.0%
AS30776 (CASEMAISP-AS)	166	4.8%
AS16265 (LEASEWEB)	152	4.4%
AS25525 (REASONNET)	125	3.6%
AS20495 (WEDARE)	104	3.0%
AS16131 (GRAFIX-IS)	84	2.4%
AS8220 (COLT)	78	2.3%
AS43560 (PANTHERIT)	78	2.3%
AS32613 (IWEB-AS)	78	2.3%
AS31100 (Unknown)	78	2.3%
Other	540	15.7%

By Host

Host	Phishing URLs hosted	Percentage
84.80.136.122	1965	57.0%
83.87.107.104	166	4.8%
217.119.57.22	78	2.3%
209.172.59.196	78	2.3%
195.20.32.103	78	2.3%
193.33.61.2	78	2.3%
84.243.222.13	65	1.9%
92.48.194.206	61	1.8%
217.148.180.50	43	1.2%
194.126.172.71	43	1.2%
Other	793	23.0%

Background

Internet Statistics		Date
Internet Hosts (est.)	11170000	2007
Internet Users (est.)	14544000	2006

Current Threat Rank
1	US (United States)
2	CN (China)
3	IL (Israel)
4	CA (Canada)
5	DE (Germany)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph