ATLAS Country Report: Global Taiwan

Country Report

Global Taiwan

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	TCP/25 (smtp)	8.67 kB	34.0%
	TCP/8080 (webcache)	6.27 kB	24.6%
	ICMP/8	3.75 kB	14.7%
	TCP/445 (microsoft-ds)	1.55 kB	6.1%
	TCP/139 (netbios-ssn)	1.55 kB	6.1%
	TCP/22 (ssh)	1.43 kB	5.6%
	TCP/80 (http)	859.34 B	3.4%
	UDP/137 (netbios-ns)	378.95 B	1.5%
	UDP/53 (domain)	198.72 B	0.8%
	UDP/14653	190.09 B	0.7%
	Other	666.39 B	2.6%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	ASN.1 constructed bit string	0.43	-62.1 %	CVE-2005-1935	18.9%
	Microsoft Windows ASN.1 Library buffer overflow attempt	0.43	-61.1 %	CVE-2003-0818	18.8%
	SSH brute-force login attempts	0.34	+234.3 %		15.2%
	Microsoft SQL Server version buffer overflow attempt	0.33	+196.5 %	CVE-2002-0649	14.7%
	POLICY PE EXE or DLL Windows file download	0.15	-68.2 %		6.8%

Inbound Attacks	0
Outbound Attacks	7
Maximum packet rate	2.72 k pps
Maximum traffic rate	1.85 Mbps
Attack class	Misuse: 7
Attack subclass	DNS: 1,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS3462 (HINET)	19.75 kB	77.4%
	AS4780 (SEEDNET)	2.84 kB	11.1%
	AS1659 (ERX-TANET-ASN1)	1.42 kB	5.5%
	AS9924 (TFN-TW)	743.32 B	2.9%
	AS7482 (APOL-AS)	358.46 B	1.4%
	AS24163 (UBBNET-AS-TW)	112.38 B	0.4%
	AS18182 (SONET-TW)	68.43 B	0.3%
	AS9416 (MULTIMEDIA-AS-AP)	55.46 B	0.2%
	AS4782 (GSNET)	39.37 B	0.2%
	AS9919 (NCIC-TW)	29.92 B	0.1%
	Other	107.94 B	0.4%

By Host

Key	Host	Bytes per subnet	Percentage
	122.127.53.119	6.17 kB	24.2%
	123.204.64.132	2.58 kB	10.1%
	122.118.78.19	1.84 kB	7.2%
	140.127.127.100 (ClusterServer1.csu.edu.tw)	1.32 kB	5.2%
	61.224.201.76	1.06 kB	4.2%
	220.130.181.213 (220-130-181-213.HINET-IP.hinet.net)	839.05 B	3.3%
	118.161.44.123	826.15 B	3.2%
	118.161.44.108	749.52 B	2.9%
	122.118.77.111	619.20 B	2.4%
	118.169.199.51	504.85 B	2.0%
	Other	9.02 kB	35.3%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS3462 (HINET)	1.11	48.9%
	AS9924 (TFN-TW)	0.55	24.2%
	AS1659 (ERX-TANET-ASN1)	0.28	12.6%
	AS10126 (CHTI-IP-AP)	0.13	5.7%
	AS9919 (NCIC-TW)	0.09	3.9%
	AS18413 (Unknown)	0.06	2.9%
	AS4780 (SEEDNET)	0.02	1.0%
	AS24158 (Unknown)	0.00	0.2%
	AS9416 (MULTIMEDIA-AS-AP)	0.00	0.2%
	AS9674 (Unknown)	0.00	0.1%
	Other	0.01	0.3%

By Host

Key	Host	Attacks per subnet	Percentage
	219.87.249.6	0.34	15.2%
	140.127.127.100 (ClusterServer1.csu.edu.tw)	0.27	12.1%
	59.115.7.102	0.24	10.5%
	118.161.7.30	0.22	9.7%
	219.87.224.82	0.17	7.6%
	220.128.58.51	0.13	5.7%
	61.217.194.69	0.12	5.5%
	59.126.45.92	0.11	4.8%
	118.161.7.248	0.09	3.9%
	220.229.34.80	0.07	3.1%
	Other	0.50	22.0%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS3462 (HINET)	4	50.0%
AS9916 (Unknown)	1	12.5%
AS4780 (SEEDNET)	1	12.5%
AS4747 (Unknown)	1	12.5%
AS1659 (ERX-TANET-ASN1)	1	12.5%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
eBay	154	23.6%
PayPal	49	7.5%
Other	450	68.9%

By ASN

ASN	Phishing URLs hosted	Percentage
AS1659 (ERX-TANET-ASN1)	330	50.5%
AS3462 (HINET)	131	20.1%
AS4780 (SEEDNET)	64	9.8%
AS17809 (Unknown)	45	6.9%
AS18420 (Unknown)	22	3.4%
AS9919 (NCIC-TW)	21	3.2%
AS18182 (SONET-TW)	21	3.2%
AS4747 (Unknown)	19	2.9%
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
140.136.242.213	220	33.7%
119.15.199.1	45	6.9%
210.70.110.210	44	6.7%
203.71.255.111	44	6.7%
210.68.183.13	43	6.6%
211.75.135.252	23	3.5%
60.249.12.49	22	3.4%
60.248.4.45	22	3.4%
203.64.21.7	22	3.4%
140.115.55.18	22	3.4%
Other	146	22.4%

Background

Internet Statistics		Date
Internet Hosts (est.)	5111000	2007
Internet Users (est.)	13210000	2005

Current Threat Rank
1	US (United States)
2	CN (China)
3	NL (Netherlands)
4	IL (Israel)
5	RO (Romania)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph