[nsp-sec] VNC scanning

[Rob Thomas]

Hi, team.

> The following list shows the number of uniq src ip scanning port 5900 hitting our darkIP for the past 8 days, the number did not go up a lot. 

I ran some queries of our Darknets, and came up with the following
statistics.  These are based on distinct sources of the port 5900 scans.


Monthly:

2009-08   32081
2009-09   36708
2009-10   24083
2009-11     564 (thus far)


Daily:

2009-10-23   1657
2009-10-24    528
2009-10-25    911
2009-10-26   1368
2009-10-27   1652
2009-10-28   1456
2009-10-29    431
2009-10-30    846
2009-10-31   1578

2009-11-01    533
2009-11-02     52 (thus far)

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
https://www.team-cymru.org/
ASSERT(coffee != empty);