Starting this month I have seen a large increase in traffic, from a couple of IPs a day to hundreds. Because of this I stopped Tweeting and automatically blogging about it. I mean, who is going to read 300 blog post a day really?
See the increase in requests per day in the graph below:
The plan is to start this month on a public status page that will contain statistics and a bunch of reports on attacks I'm seeing. All automated and shiny!
Statistics:
Total queries this month: 4.201.970
Most popular domain: isco.org with 2.929.013 requests.
4606 unique source IPs, 2270 observed more than 100 times.
Top 25 attacks in May:
278594 190.93.249.10
273946 190.93.248.10
85358 88.191.237.70
78650 109.3.51.194
60377 173.245.59.142
56019 173.245.59.99
55901 173.245.58.99
50803 5.9.237.226
50107 173.245.58.138
47870 198.27.64.205
36003 78.143.14.139
28427 207.171.170.1
26077 207.171.179.1
21605 88.166.164.160
21525 168.62.23.92
19925 204.93.210.100
18375 168.61.144.13
18345 168.63.55.14
16873 174.98.255.164
15940 74.125.31.121
15712 72.52.12.48
15505 37.59.28.132
15351 188.165.94.215
15298 50.18.190.126
15186 137.116.32.32
IPs per country:
Requests per country:
This gives a pretty good view of what I have been looking at on my dashboard.
Coming up next:
Details on a few characteristics, snort rules to detect attacks and development on the dashboard!
No comments:
Post a Comment