Sunday, June 2, 2013

Statistics May 2013

From this month on I will try to publish a monthly post containing some statistics of what I have been observing with my little project.

Starting this month I have seen a large increase in traffic, from a couple of IPs a day to hundreds. Because of this I stopped Tweeting and automatically blogging about it. I mean, who is going to read 300 blog post a day really?

See the increase in requests per day in the graph below:



The plan is to start this month on a public status page that will contain statistics and a bunch of reports on attacks I'm seeing. All automated and shiny!

Statistics:


Total queries this month: 4.201.970

Most popular domain: isco.org with 2.929.013 requests.


4606 unique source IPs, 2270 observed more than 100 times.

Top 25 attacks in May:

 278594 190.93.249.10
 273946 190.93.248.10 
   85358 88.191.237.70
   78650 109.3.51.194
   60377 173.245.59.142
   56019 173.245.59.99
   55901 173.245.58.99
   50803 5.9.237.226
   50107 173.245.58.138
   47870 198.27.64.205
   36003 78.143.14.139
   28427 207.171.170.1
   26077 207.171.179.1
   21605 88.166.164.160
   21525 168.62.23.92
   19925 204.93.210.100
   18375 168.61.144.13
   18345 168.63.55.14
   16873 174.98.255.164
   15940 74.125.31.121
   15712 72.52.12.48
   15505 37.59.28.132
   15351 188.165.94.215
   15298 50.18.190.126
   15186 137.116.32.32


IPs per country:

Requests per country:


This gives a pretty good view of what I have been looking at on my dashboard.

Coming up next:


Details on a few characteristics, snort rules to detect attacks and development on the dashboard!

No comments:

Post a Comment