ATLAS Country Report: Global South Africa

Country Report

Global South Africa

View:
Activity
Sources
Malicious Servers

Output:
Print
XML
CSV

Activity (past 24 hours)

Key	Service	Bytes per subnet	Percentage
	ICMP/8	24.66 kB	39.2%
	TCP/135	15.57 kB	24.7%
	TCP/139 (netbios-ssn)	5.82 kB	9.3%
	UDP/53 (domain)	3.19 kB	5.1%
	TCP/1433 (ms-sql-s)	2.10 kB	3.3%
	UDP/161 (snmp)	1.64 kB	2.6%
	TCP/445 (microsoft-ds)	1.27 kB	2.0%
	TCP/2967	1.25 kB	2.0%
	UDP/137 (netbios-ns)	1.23 kB	2.0%
	UDP/9996	1.21 kB	1.9%
	Other	4.96 kB	7.9%

Key	Description	Attacks per subnet	Change from yesterday	CVE	Percentage
	VNC network scanning activity	4.03	+13539.2 %		82.7%
	RPC portmap mountd request UDP	0.16	+5.7 %		3.2%
	EXPLOIT Solaris telnet USER environment vuln Attack inbound	0.03	-22.1 %		0.7%
	EXPLOIT Solaris telnet USER environment vuln Attack outbound	0.03	-22.1 %		0.7%

Inbound Attacks	0
Outbound Attacks	0
Maximum packet rate	0 pps
Maximum traffic rate	0 bps
Attack class
Attack subclass

Sources (past 24 hours)

By ASN

Key	ASN	Bytes per subnet	Percentage
	AS3741 (IS)	53.29 kB	84.7%
	AS5713 (SAIX-NET)	4.43 kB	7.0%
	AS16637 (MTNNS-AS)	2.02 kB	3.2%
	AS29918 (IMPOL-ASN)	1.13 kB	1.8%
	AS2905 (TICSA-ASN)	655.10 B	1.0%
	AS33762 (WBSMOBILE)	511.74 B	0.8%
	AS29975 (VODACOM-ZA)	417.63 B	0.7%
	AS11845 (DPBOL)	200.84 B	0.3%
	AS10474 (NETACTIVE)	100.03 B	0.2%
	AS36883 (Metroweb)	44.18 B	0.1%
	Other	104.90 B	0.2%

By Host

Key	Host	Bytes per subnet	Percentage
	163.203.227.227	1.55 kB	2.5%
	196.208.71.172	1.42 kB	2.3%
	196.208.94.110	1.32 kB	2.1%
	196.44.2.186	1.21 kB	1.9%
	196.14.139.216	1.19 kB	1.9%
	196.208.75.130	1.09 kB	1.7%
	196.46.142.87 (87.142.46.196.static.impol.net)	1.08 kB	1.7%
	196.208.89.181	1.06 kB	1.7%
	196.208.79.189	947.58 B	1.5%
	196.208.47.191 (c1-191-1.vlt.dial-up.net)	843.40 B	1.3%
	Other	51.18 kB	81.4%

By ASN

Key	ASN	Attacks per subnet	Percentage
	AS29918 (IMPOL-ASN)	4.03	82.7%
	AS3741 (IS)	0.71	14.5%
	AS29975 (VODACOM-ZA)	0.08	1.6%
	AS5713 (SAIX-NET)	0.05	1.0%
	AS2905 (TICSA-ASN)	0.01	0.1%
	AS16637 (MTNNS-AS)	0.00	0.1%
	AS6453 (GLOBEINTERNET)	0.00	0.0%
	AS33762 (WBSMOBILE)	0.00	0.0%
	AS22351 (INTELSAT)	0.00	0.0%
	AS36874 (CA2-AS)	0.00	0.0%
	Other	0.00	0.0%

By Host

Key	Host	Attacks per subnet	Percentage
	196.46.142.87 (87.142.46.196.static.impol.net)	4.03	82.7%
	168.209.255.43 (core2a-rba-lo0.ip.isnet.net)	0.18	3.7%
	196.14.248.146	0.16	3.3%
	168.209.255.251 (core1a-rba-lo0.ip.isnet.net)	0.15	3.1%
	196.11.146.79	0.04	0.8%
	196.11.146.118	0.04	0.8%
	168.209.255.200 (core2-dbn-lo0.ip.isnet.net)	0.03	0.7%
	168.209.255.254	0.03	0.6%
	168.209.255.160 (core1a-bry-lo0.ip.isnet.net)	0.03	0.5%
	196.25.37.251	0.03	0.5%
	Other	0.16	3.3%

Malicious Servers (past 24 hours)

By ASN

ASN	Number of servers	Percentage
AS11845 (DPBOL)	1	100.0%
Other	0	0.0%

By Targeted Brand

Brand Name	Phished URLs	Percentage
Other	0	0.0%

By ASN

ASN	Phishing URLs hosted	Percentage
Other	0	0.0%

By Host

Host	Phishing URLs hosted	Percentage
Other	0	0.0%

Background

Internet Statistics		Date
Internet Hosts (est.)	1088000	2007
Internet Users (est.)	5100000	2005

Current Threat Rank
1	US (United States)
2	CN (China)
3	NL (Netherlands)
4	IL (Israel)
5	RO (Romania)

Recent Activity

Threat Rank (30 days)

rank history graph

Number of Scanning Sources (30 days)

scanner history graph

Number of Attacking Sources (30 days)

attacker history graph