ATLAS Country Report: Global United States

Country Report

Global United States

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	TCP/445 (microsoft-ds)	17.94 kB	17.8%
	ICMP/8	15.26 kB	15.1%
	TCP/139 (netbios-ssn)	14.40 kB	14.3%
	UDP/1071	12.29 kB	12.2%
	UDP/137 (netbios-ns)	4.63 kB	4.6%
	UDP/161 (snmp)	3.75 kB	3.7%
	TCP/1433 (ms-sql-s)	3.10 kB	3.1%
	UDP/53 (domain)	2.90 kB	2.9%
	TCP/1355	2.09 kB	2.1%
	TCP/10000	2.05 kB	2.0%
	Other	22.41 kB	22.2%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	Microsoft Windows ASN.1 Library buffer overflow attempt	11.05	+2.9 %	CVE-2003-0818	20.8%
	ASN.1 constructed bit string	10.93	+1.9 %	CVE-2005-1935	20.5%
	Microsoft Windows RPC Bind Request buffer overflow attempt	8.54	-15.8 %	CVE-2004-0116	16.0%
	POLICY PE EXE or DLL Windows file download	7.36	-14.8 %		13.8%
	Microsoft SQL Server version buffer overflow attempt	4.92	-13.5 %	CVE-2002-0649	9.2%

Inbound Attacks	4678
Outbound Attacks	7311
Maximum packet rate	2.71 M pps
Maximum traffic rate	21.76 Gbps
Attack class	Misuse: 2974 Profiled: 8679 Fingerprint: 336
Attack subclass	: 2, DNS: 1, 109: 1, TCP SYN: 2, TCP Flags: 1, Private Address Space: 1, Bandwidth: 2, Protocol: 2, TCP RST: 2, TCP NULL: 1, Total Traffic: 2,

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS26415 (VERISIGN-INC)	12.77 kB	12.7%
	AS7132 (Unknown)	7.43 kB	7.4%
	AS209 (ASN-QWEST)	6.33 kB	6.3%
	AS19262 (VZGNI-TRANSIT)	6.30 kB	6.2%
	AS6128 (CABLE-NET-1)	3.73 kB	3.7%
	AS7018 (ATT-INTERNET4)	3.21 kB	3.2%
	AS3663 (NETNET-NET)	3.15 kB	3.1%
	AS7106 (OHIOBRIGHTNET)	2.57 kB	2.6%
	AS701 (UUNET)	2.56 kB	2.5%
	AS14654 (WAYPORT)	2.24 kB	2.2%
	Other	50.52 kB	50.1%

By Host

Key	Host	Bytes per subnet	Percentage
	192.58.128.30 (j.root-servers.net)	12.76 kB	12.7%
	206.40.117.226 (206-40-117-226.netnet.net)	3.15 kB	3.1%
	63.147.130.161 (mx1.thewinegroup.com)	2.59 kB	2.6%
	66.209.130.52 (stm-ftth-461.brightohio.net)	2.55 kB	2.5%
	65.241.37.11	2.30 kB	2.3%
	71.124.105.81 (pool-71-124-105-81.chi01.dsl-w.verizon.net)	2.23 kB	2.2%
	167.206.243.74 (kenny.dwjtv.com)	2.09 kB	2.1%
	24.199.8.198 (rrcs-24-199-8-198.west.biz.rr.com)	1.91 kB	1.9%
	72.4.93.238 (72-4-93-238.symrinaa.customers.broadreach.net)	1.82 kB	1.8%
	72.29.44.138	1.79 kB	1.8%
	Other	67.62 kB	67.1%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS7132 (Unknown)	7.88	14.8%
	AS701 (UUNET)	6.29	11.8%
	AS11426 (SCRR-11426)	5.34	10.0%
	AS19262 (VZGNI-TRANSIT)	4.81	9.0%
	AS7018 (ATT-INTERNET4)	2.49	4.7%
	AS209 (ASN-QWEST)	2.36	4.4%
	AS14751 (CONVERSENT)	2.04	3.8%
	AS12271 (SCRR-12271)	1.98	3.7%
	AS7106 (OHIOBRIGHTNET)	1.36	2.6%
	AS14654 (WAYPORT)	1.03	1.9%
	Other	17.64	33.1%

By Host

Key	Host	Attacks per subnet	Percentage
	65.241.37.11	6.02	11.3%
	75.190.148.210 (cpe-075-190-148-210.carolina.res.rr.com)	5.20	9.8%
	70.228.76.86 (adsl-70-228-76-86.dsl.akrnoh.ameritech.net)	4.02	7.5%
	12.16.49.158	2.03	3.8%
	209.113.224.114 (mail.unimacgraphics.com)	1.93	3.6%
	72.229.6.173 (cpe-72-229-6-173.nyc.res.rr.com)	1.62	3.0%
	66.209.130.52 (stm-ftth-461.brightohio.net)	1.36	2.6%
	72.94.1.141 (pool-72-94-1-141.phlapa.fios.verizon.net)	1.15	2.2%
	65.74.217.163	1.03	1.9%
	216.161.86.53	0.92	1.7%
	Other	27.96	52.5%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS23522 (Unknown)	30	14.0%
AS25761 (Unknown)	22	10.2%
AS30083 (Unknown)	12	5.6%
AS27524 (XEEX-COMMUNICATIONS)	10	4.7%
AS21844 (THEPLANET-AS)	10	4.7%
AS30058 (FDCSERVERS)	9	4.2%
AS35908 (VPLSNET)	7	3.3%
AS7132 (Unknown)	6	2.8%
AS22773 (CCINET-2)	6	2.8%
AS6461 (MFNX)	4	1.9%
Other	99	46.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
eBay	2868	2.8%
PayPal	2396	2.3%
HSBC	194	0.2%
CitiCorp	172	0.2%
Halifax Bank	160	0.2%
Wells Fargo	103	0.1%
Barclays Bank	65	0.1%
Fifth Third Bank	64	0.1%
Bank of America	51	0.0%
JP Morgan Chase	33	0.0%
Other	97175	94.1%

By ASN

ASN	Phishing URLs hosted	Percentage
AS7132 (Unknown)	34737	33.6%
AS33652 (DNEO-OSP7)	5234	5.1%
AS12015 (SUNFLOWER-CABLEVISION)	5168	5.0%
AS7725 (CCH-AS7)	4502	4.4%
AS20001 (ROADRUNNER-WEST)	4456	4.3%
AS14751 (CONVERSENT)	2718	2.6%
AS33662 (DNEO-OSP7)	2631	2.5%
AS33651 (Unknown)	2474	2.4%
AS33287 (DNEO-OSP4)	2286	2.2%
AS13446 (AS-NETZERO)	2111	2.0%
Other	36964	35.8%

By Host

Host	Phishing URLs hosted	Percentage
70.248.61.98 (adsl-70-248-61-98.dsl.rcsntx.swbell.net)	6016	5.8%
66.45.131.57 (57.131.45.66.cm.sunflower.com)	5168	5.0%
76.25.55.190 (c-76-25-55-190.hsd1.co.comcast.net)	4503	4.4%
24.24.158.23 (cpe-24-24-158-23.socal.res.rr.com)	4456	4.3%
69.149.154.131	4073	3.9%
70.246.171.178 (ppp-70-246-171-178.dsl.lgvwtx.swbell.net)	3685	3.6%
98.193.232.166 (c-98-193-232-166.hsd1.tn.comcast.net)	3532	3.4%
155.212.229.11 (host11.155.212.229.conversent.net)	2696	2.6%
71.142.109.62	2680	2.6%
76.249.182.186 (adsl-76-249-182-186.dsl.milwwi.sbcglobal.net)	2554	2.5%
Other	63918	61.9%

Background

Internet Statistics		Date
Internet Hosts (est.)	3950000	2007
Internet Users (est.)	208000000	2006

Current Threat Rank
1	US (United States)
2	CN (China)
3	CA (Canada)
4	DE (Germany)
5	NL (Netherlands)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph