[nsp-sec] UDP 7100 Increase?
Jose Nazario
jose at arbor.net
Tue Mar 4 13:44:20 EST 2008
On Mon, 3 Mar 2008, Matthew.Swaar at us-cert.gov wrote:
> Anyone seeing a UDP-7100 traffic increase? If so, does anyone know
> what's causing it?
no t consistently, and no.
i have attached a week's worth of top 50 scanners from ATLAS (scaled to be
bytes per /24 we monitor) here.
data format is IP, date, count, aggregated by source IP. example block:
192.58.128.30 02/25/08 17128.663129
192.58.128.30 02/26/08 53286.575326
192.58.128.30 02/27/08 56766.871956
192.58.128.30 02/28/08 43054.24456
192.58.128.30 02/29/08 23728.816873
192.58.128.30 03/01/08 1074.512259
192.58.128.30 03/02/08 40036.309391
192.58.128.30 03/03/08 23617.918503
202.101.235.100 02/25/08 9323.345363
202.101.235.100 02/26/08 35912.879918
202.101.235.100 02/27/08 37242.311808
202.101.235.100 02/28/08 34953.976942
202.101.235.100 02/29/08 34632.895861
202.101.235.100 03/01/08 35025.349387
202.101.235.100 03/02/08 36869.806164
202.101.235.100 03/03/08 23718.125424
the feb 25 data is cut off at 13:00 US Eastern due to the way i queried,
so it's artificially low (ie less than a half day's records)
hope this helps.
-------------------------------------------------------------
jose nazario, ph.d. <jose at arbor.net>
security researcher, office of the CTO, arbor networks
v: (734) 821 1427 http://asert.arbornetworks.com/
-------------- next part --------------
192.58.128.30 02/25/08 17128.663129
192.58.128.30 02/26/08 53286.575326
192.58.128.30 02/27/08 56766.871956
192.58.128.30 02/28/08 43054.24456
192.58.128.30 02/29/08 23728.816873
192.58.128.30 03/01/08 1074.512259
192.58.128.30 03/02/08 40036.309391
192.58.128.30 03/03/08 23617.918503
202.101.235.100 02/25/08 9323.345363
202.101.235.100 02/26/08 35912.879918
202.101.235.100 02/27/08 37242.311808
202.101.235.100 02/28/08 34953.976942
202.101.235.100 02/29/08 34632.895861
202.101.235.100 03/01/08 35025.349387
202.101.235.100 03/02/08 36869.806164
202.101.235.100 03/03/08 23718.125424
58.20.228.52 02/25/08 8357.70152
58.20.228.52 02/26/08 32836.13688
58.20.228.52 02/27/08 34248.135195
58.20.228.52 02/28/08 32704.657203
58.20.228.52 02/29/08 33025.269873
58.20.228.52 03/01/08 33102.694784
58.20.228.52 03/02/08 33647.585554
58.20.228.52 03/03/08 25911.202209
222.57.123.227 02/25/08 10532.239573
222.57.123.227 02/26/08 39593.886423
222.57.123.227 02/27/08 41126.178822
222.57.123.227 02/28/08 38606.927166
222.57.123.227 02/29/08 39061.426201
222.57.123.227 03/01/08 39623.642406
222.57.123.227 03/02/08 2412.336841
202.99.11.99 02/25/08 7416.814748
202.99.11.99 02/26/08 29124.52946
202.99.11.99 02/27/08 30262.722435
202.99.11.99 02/28/08 28901.826115
202.99.11.99 02/29/08 29083.686696
202.99.11.99 03/01/08 29179.797957
202.99.11.99 03/02/08 29240.430947
202.99.11.99 03/03/08 22699.682447
61.132.223.14 02/25/08 7088.250733
61.132.223.14 02/26/08 27805.314299
61.132.223.14 02/27/08 28802.559838
61.132.223.14 02/28/08 27330.463472
61.132.223.14 02/29/08 26986.309209
61.132.223.14 03/01/08 27246.962549
61.132.223.14 03/02/08 28417.375397
61.132.223.14 03/03/08 22156.837093
136.1.7.55 02/25/08 6979.800874
136.1.7.55 02/26/08 27481.127604
136.1.7.55 02/27/08 28489.253589
136.1.7.55 02/28/08 26981.721022
136.1.7.55 02/29/08 26766.935388
136.1.7.55 03/01/08 26944.933709
136.1.7.55 03/02/08 28090.58628
136.1.7.55 03/03/08 22144.2083
218.64.237.219 02/25/08 7932.831412
218.64.237.219 02/26/08 29227.498718
218.64.237.219 02/27/08 30263.2956
218.64.237.219 02/28/08 28576.79563
218.64.237.219 02/29/08 28053.763396
218.64.237.219 03/01/08 15331.80647
218.64.237.219 03/02/08 31016.799098
218.64.237.219 03/03/08 22713.52368
220.191.233.133 02/25/08 6904.306912
220.191.233.133 02/26/08 26627.706206
220.191.233.133 02/27/08 25968.972398
220.191.233.133 02/28/08 26022.221353
220.191.233.133 02/29/08 25692.864237
220.191.233.133 03/01/08 25840.10646
220.191.233.133 03/02/08 27285.545913
220.191.233.133 03/03/08 21192.301112
203.94.243.191 02/25/08 7365.647779
203.94.243.191 02/26/08 28060.459355
203.94.243.191 02/27/08 27147.967129
203.94.243.191 02/28/08 26602.905568
203.94.243.191 02/29/08 24008.346108
203.94.243.191 03/01/08 26854.179389
203.94.243.191 03/02/08 25250.143509
203.94.243.191 03/03/08 20110.655253
58.242.42.235 02/25/08 5691.571118
58.242.42.235 02/26/08 22270.851087
58.242.42.235 02/27/08 22637.834578
58.242.42.235 02/28/08 22579.548243
58.242.42.235 02/29/08 22249.128423
58.242.42.235 03/01/08 22404.565549
58.242.42.235 03/02/08 22515.583503
58.242.42.235 03/03/08 17729.378063
202.103.11.41 02/25/08 5391.630583
202.103.11.41 02/26/08 21498.372557
202.103.11.41 02/27/08 22165.244618
202.103.11.41 02/28/08 21038.22423
202.103.11.41 02/29/08 20769.176659
202.103.11.41 03/01/08 20851.483195
202.103.11.41 03/02/08 21745.361157
202.103.11.41 03/03/08 17180.203497
221.208.208.95 02/25/08 4607.756835
221.208.208.95 02/26/08 19210.642425
221.208.208.95 02/27/08 20463.307999
221.208.208.95 02/28/08 21511.536673
221.208.208.95 02/29/08 20662.246269
221.208.208.95 03/01/08 20780.521657
221.208.208.95 03/02/08 21191.456775
221.208.208.95 03/03/08 15902.820353
202.97.238.200 02/25/08 4898.750933
202.97.238.200 02/26/08 19033.188272
202.97.238.200 02/27/08 20275.692147
202.97.238.200 02/28/08 19870.518989
202.97.238.200 02/29/08 19730.999561
202.97.238.200 03/01/08 19702.836902
202.97.238.200 03/02/08 20273.574011
202.97.238.200 03/03/08 14708.142281
222.173.101.157 02/25/08 8408.828605
222.173.101.157 02/26/08 35623.407339
222.173.101.157 02/27/08 36891.074023
222.173.101.157 02/28/08 32001.113299
222.173.101.157 02/29/08 154.161151
222.173.101.157 03/03/08 24464.630824
221.209.110.7 02/25/08 3774.527857
221.209.110.7 02/26/08 17087.118196
221.209.110.7 02/27/08 19227.467216
221.209.110.7 02/28/08 19089.376535
221.209.110.7 02/29/08 18187.739327
221.209.110.7 03/01/08 18559.83414
221.209.110.7 03/02/08 18151.217834
221.209.110.7 03/03/08 14258.417684
202.97.238.233 02/25/08 4988.356222
202.97.238.233 02/26/08 19584.550692
202.97.238.233 02/27/08 6956.938997
202.97.238.233 02/28/08 13899.324728
202.97.238.233 02/29/08 19741.040137
202.97.238.233 03/01/08 19780.242654
202.97.238.233 03/02/08 20033.326204
202.97.238.233 03/03/08 15316.910202
218.9.66.130 02/25/08 4435.230816
218.9.66.130 02/26/08 17412.14126
218.9.66.130 02/27/08 18120.987491
218.9.66.130 02/28/08 17257.323463
218.9.66.130 02/29/08 17289.763394
218.9.66.130 03/01/08 16856.923314
218.9.66.130 03/02/08 14394.61243
218.9.66.130 03/03/08 11619.026245
202.97.238.226 02/25/08 5121.088233
202.97.238.226 02/26/08 19976.77543
202.97.238.226 02/27/08 7203.204769
202.97.238.226 02/28/08 13242.460761
202.97.238.226 02/29/08 18106.25423
202.97.238.226 03/01/08 18155.687213
202.97.238.226 03/02/08 18273.044428
202.97.238.226 03/03/08 13980.943541
221.208.208.94 02/25/08 3672.882068
221.208.208.94 02/26/08 15491.207378
221.208.208.94 02/27/08 16100.865786
221.208.208.94 02/28/08 16570.966764
221.208.208.94 02/29/08 16106.118104
221.208.208.94 03/01/08 16398.352355
221.208.208.94 03/02/08 16629.681757
221.208.208.94 03/03/08 12519.757097
202.97.238.232 02/25/08 4577.548572
202.97.238.232 02/26/08 18061.026843
202.97.238.232 02/27/08 6399.803387
202.97.238.232 02/28/08 13224.128429
202.97.238.232 02/29/08 18582.268313
202.97.238.232 03/01/08 18656.372811
202.97.238.232 03/02/08 18927.684391
202.97.238.232 03/03/08 14522.343637
222.217.240.216 02/25/08 5975.283521
222.217.240.216 02/26/08 20227.980221
222.217.240.216 02/27/08 24436.95464
222.217.240.216 02/28/08 23339.964903
222.217.240.216 02/29/08 22782.260681
222.217.240.216 03/01/08 15666.616284
221.208.208.83 02/25/08 3750.145933
221.208.208.83 02/26/08 14375.822934
221.208.208.83 02/27/08 15684.322777
221.208.208.83 02/28/08 15416.16969
221.208.208.83 02/29/08 15080.192083
221.208.208.83 03/01/08 15220.429443
221.208.208.83 03/02/08 15512.398248
221.208.208.83 03/03/08 11675.189956
218.10.137.139 02/25/08 3164.449484
218.10.137.139 02/26/08 13335.167123
218.10.137.139 02/27/08 14465.911045
218.10.137.139 02/28/08 14806.213822
218.10.137.139 02/29/08 14127.043026
218.10.137.139 03/01/08 14175.444456
218.10.137.139 03/02/08 14467.808434
218.10.137.139 03/03/08 10965.727836
221.208.208.98 02/25/08 3044.829829
221.208.208.98 02/26/08 13064.966916
221.208.208.98 02/27/08 13939.213991
221.208.208.98 02/28/08 14894.655197
221.208.208.98 02/29/08 14109.928624
221.208.208.98 03/01/08 14146.635732
221.208.208.98 03/02/08 14334.153431
221.208.208.98 03/03/08 10748.745091
221.209.110.12 02/25/08 2952.423655
221.209.110.12 02/26/08 12924.501959
221.209.110.12 02/27/08 14325.143344
221.209.110.12 02/28/08 14413.66877
221.209.110.12 02/29/08 13810.531616
221.209.110.12 03/01/08 13930.852613
221.209.110.12 03/02/08 14330.557577
221.209.110.12 03/03/08 10767.538914
202.97.238.197 02/25/08 3488.851776
202.97.238.197 02/26/08 13397.234384
202.97.238.197 02/27/08 14076.218091
202.97.238.197 02/28/08 13794.407408
202.97.238.197 02/29/08 13750.757278
202.97.238.197 03/01/08 13847.996328
202.97.238.197 03/02/08 14023.270115
202.97.238.197 03/03/08 10724.779014
202.97.238.196 02/25/08 3353.411996
202.97.238.196 02/26/08 13215.248351
202.97.238.196 02/27/08 14018.040614
202.97.238.196 02/28/08 13988.172253
202.97.238.196 02/29/08 13705.00228
202.97.238.196 03/01/08 13866.755489
202.97.238.196 03/02/08 13968.70397
202.97.238.196 03/03/08 10567.900072
221.208.208.101 02/25/08 3707.150365
221.208.208.101 02/26/08 14915.423222
221.208.208.101 02/27/08 15894.902605
221.208.208.101 02/28/08 16389.115202
221.208.208.101 02/29/08 15877.188904
221.208.208.101 03/01/08 16035.070286
221.208.208.101 03/02/08 1710.876651
221.208.208.101 03/03/08 10735.465446
221.208.208.87 02/25/08 3022.705697
221.208.208.87 02/26/08 12601.511698
221.208.208.87 02/27/08 13310.128746
221.208.208.87 02/28/08 14165.286655
221.208.208.87 02/29/08 13189.417159
221.208.208.87 03/01/08 13638.359377
221.208.208.87 03/02/08 13668.964291
221.208.208.87 03/03/08 10360.262816
202.97.238.228 02/25/08 3533.743998
202.97.238.228 02/26/08 14324.456531
202.97.238.228 02/27/08 4845.246438
202.97.238.228 02/28/08 12347.973919
202.97.238.228 02/29/08 15438.917156
202.97.238.228 03/01/08 15833.169078
202.97.238.228 03/02/08 16056.65197
202.97.238.228 03/03/08 11543.588749
221.209.110.9 02/25/08 3139.74067
221.209.110.9 02/26/08 12956.533679
221.209.110.9 02/27/08 13952.01439
221.209.110.9 02/28/08 13183.166103
221.209.110.9 02/29/08 13365.85453
221.209.110.9 03/01/08 13127.927771
221.209.110.9 03/02/08 13533.921008
221.209.110.9 03/03/08 10152.853807
221.208.208.104 02/25/08 2964.688406
221.208.208.104 02/26/08 12218.229905
221.208.208.104 02/27/08 13680.235529
221.208.208.104 02/28/08 13665.029137
221.208.208.104 02/29/08 12946.138564
221.208.208.104 03/01/08 13568.242563
221.208.208.104 03/02/08 13476.293692
221.208.208.104 03/03/08 10015.565008
221.208.208.89 02/25/08 3136.99367
221.208.208.89 02/26/08 12707.720629
221.208.208.89 02/27/08 13280.87635
221.208.208.89 02/28/08 12829.998173
221.208.208.89 02/29/08 12851.530849
221.208.208.89 03/01/08 12845.673923
221.208.208.89 03/02/08 12980.444601
221.208.208.89 03/03/08 10015.72105
202.97.238.195 02/25/08 4950.881817
202.97.238.195 02/26/08 9561.628794
202.97.238.195 02/27/08 10745.667482
202.97.238.195 02/28/08 11082.426214
202.97.238.195 02/29/08 13522.735152
202.97.238.195 03/01/08 15098.971328
202.97.238.195 03/02/08 11004.531441
202.97.238.195 03/03/08 7895.497562
202.97.238.202 02/25/08 2391.643149
202.97.238.202 02/26/08 11505.754994
202.97.238.202 02/27/08 11364.388854
202.97.238.202 02/28/08 11482.21257
202.97.238.202 02/29/08 11722.13258
202.97.238.202 03/01/08 10484.700251
202.97.238.202 03/02/08 14118.809498
202.97.238.202 03/03/08 8908.763441
202.97.238.201 02/25/08 3795.040004
202.97.238.201 02/26/08 14685.571185
202.97.238.201 02/27/08 15833.318455
202.97.238.201 02/28/08 15140.593922
202.97.238.201 02/29/08 5743.121826
202.97.238.201 03/01/08 130.56798
202.97.238.201 03/02/08 14643.772363
202.97.238.201 03/03/08 11710.61665
195.5.255.98 02/25/08 2898.643277
195.5.255.98 02/26/08 11638.178279
195.5.255.98 02/27/08 12614.293984
195.5.255.98 02/28/08 12053.359425
195.5.255.98 02/29/08 12015.273635
195.5.255.98 03/01/08 12070.271341
195.5.255.98 03/02/08 11046.702502
195.5.255.98 03/03/08 6265.87133
221.208.208.86 02/25/08 3917.42388
221.208.208.86 02/26/08 9419.12456
221.208.208.86 02/27/08 11735.680187
221.208.208.86 02/28/08 10428.994481
221.208.208.86 02/29/08 13218.742505
221.208.208.86 03/01/08 11818.803747
221.208.208.86 03/02/08 8256.363906
221.208.208.86 03/03/08 9177.190949
202.97.238.231 02/25/08 3237.95035
202.97.238.231 02/26/08 12502.498478
202.97.238.231 02/27/08 4563.594219
202.97.238.231 02/28/08 9133.894254
202.97.238.231 02/29/08 12809.4214
202.97.238.231 03/01/08 12883.823249
202.97.238.231 03/02/08 12933.424426
202.97.238.231 03/03/08 9904.550789
221.208.208.96 02/25/08 2330.102127
221.208.208.96 02/26/08 10317.474467
221.208.208.96 02/27/08 10780.903628
221.208.208.96 02/28/08 10737.017525
221.208.208.96 02/29/08 10637.569002
221.208.208.96 03/01/08 10734.188083
221.208.208.96 03/02/08 10886.557382
221.208.208.96 03/03/08 11056.394333
221.208.208.90 02/25/08 5636.864954
221.208.208.90 02/26/08 6033.874025
221.208.208.90 02/27/08 13617.725825
221.208.208.90 02/28/08 12134.724154
221.208.208.90 02/29/08 6922.057405
221.208.208.90 03/01/08 14895.818917
221.208.208.90 03/02/08 11075.568576
221.208.208.90 03/03/08 6068.632176
221.204.254.110 02/25/08 3590.799159
221.204.254.110 02/26/08 13980.676719
221.204.254.110 02/27/08 14539.073538
221.204.254.110 02/28/08 13883.236136
221.204.254.110 02/29/08 13995.080878
221.204.254.110 03/01/08 7361.175176
221.204.254.110 03/02/08 4978.228869
221.204.254.110 03/03/08 3864.652675
221.6.145.18 02/25/08 1970.40096
221.6.145.18 02/26/08 2944.864298
221.6.145.18 02/28/08 14456.971186
221.6.145.18 02/29/08 14705.906481
221.6.145.18 03/01/08 14885.396656
221.6.145.18 03/02/08 15090.245716
221.6.145.18 03/03/08 11036.941373
202.97.238.203 02/25/08 2153.376899
202.97.238.203 02/26/08 9996.406119
202.97.238.203 02/27/08 9024.261056
202.97.238.203 02/28/08 14615.569853
202.97.238.203 02/29/08 10616.843173
202.97.238.203 03/01/08 9213.138535
202.97.238.203 03/02/08 14645.805768
202.97.238.203 03/03/08 4718.945422
218.10.137.141 02/25/08 2522.026162
218.10.137.141 02/26/08 10446.458577
218.10.137.141 02/27/08 10431.731575
218.10.137.141 02/28/08 12521.404087
218.10.137.141 02/29/08 11098.685007
218.10.137.141 03/01/08 10654.466849
218.10.137.141 03/02/08 10729.123063
218.10.137.141 03/03/08 6480.383166
221.209.110.20 02/25/08 2863.243318
221.209.110.20 02/26/08 13595.418144
221.209.110.20 02/27/08 4676.770837
221.209.110.20 02/28/08 16701.875166
221.209.110.20 02/29/08 6202.902616
221.209.110.20 03/01/08 15255.380761
221.209.110.20 03/02/08 7645.891383
221.209.110.20 03/03/08 6490.306716
221.209.110.50 02/25/08 894.1959
221.209.110.50 02/26/08 12685.208843
221.209.110.50 02/27/08 9957.656201
221.209.110.50 02/28/08 8727.444556
221.209.110.50 02/29/08 11651.544632
221.209.110.50 03/01/08 9998.667589
221.209.110.50 03/02/08 11401.187633
221.209.110.50 03/03/08 6456.085366
202.97.238.227 02/25/08 2992.246976
202.97.238.227 02/26/08 11600.947551
202.97.238.227 02/27/08 4087.846899
202.97.238.227 02/28/08 8354.181449
202.97.238.227 02/29/08 11544.916065
202.97.238.227 03/01/08 11440.061072
202.97.238.227 03/02/08 11717.571067
202.97.238.227 03/03/08 8906.947777
202.97.238.204 02/25/08 2117.263319
202.97.238.204 02/26/08 9236.857956
202.97.238.204 02/27/08 9421.491887
202.97.238.204 02/28/08 11573.367411
202.97.238.204 02/29/08 9520.154944
202.97.238.204 03/01/08 9901.551309
202.97.238.204 03/02/08 11732.897507
202.97.238.204 03/03/08 6796.931297
other 02/25/08 629384.491352
other 02/26/08 2200620.05351
other 02/27/08 2137877.5818
other 02/28/08 1847983.2647
other 02/29/08 2046804.85412
other 03/01/08 2115037.17592
other 03/02/08 2182737.71172
other 03/03/08 1707654.56535
More information about the nsp-security
mailing list