{"id":1147,"date":"2006-07-05T23:53:33","date_gmt":"2006-07-06T02:53:33","guid":{"rendered":"http:\/\/www.hoogervorst.ca\/arthur\/?p=1147"},"modified":"2006-07-05T23:53:33","modified_gmt":"2006-07-06T02:53:33","slug":"more-stuff","status":"publish","type":"post","link":"http:\/\/www.hoogervorst.ca\/arthur\/?p=1147","title":{"rendered":"More stuff"},"content":{"rendered":"

Y<\/span>esterday, I mentioned the logs that I imported into a Postgres database: today some minor cleanup and indexing\/reindexing. The full monty:\n<\/p>\n

The hardest hit day was on September 7th of 2004: 86803 hits in 2 hours only. I’m still collecting data about ports, but here some quick data: You need to read beyond the fold for this one.\n<\/p>\n

<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Top 10 incoming hits from single IP addresses<\/caption>\n
source_ip<\/th>\nmin<\/th>\nmax<\/th>\ncount<\/th>\n<\/tr>\n<\/thead>\n
68.186.67.114<\/td>\n9\/7\/2004 7:12:30 PM<\/td>\n9\/7\/2004 8:58:56 PM<\/td>\n12770<\/td>\n<\/tr>\n
66.171.67.43<\/td>\n12\/8\/2004 8:34:46 PM<\/td>\n12\/8\/2004 10:39:34 PM<\/td>\n7431<\/td>\n<\/tr>\n
64.113.126.64<\/td>\n9\/7\/2004 7:12:30 PM<\/td>\n9\/7\/2004 8:58:54 PM<\/td>\n6385<\/td>\n<\/tr>\n
65.102.84.220<\/td>\n9\/7\/2004 7:12:32 PM<\/td>\n9\/7\/2004 8:58:56 PM<\/td>\n6385<\/td>\n<\/tr>\n
192.189.102.2<\/td>\n9\/7\/2004 7:12:30 PM<\/td>\n9\/7\/2004 8:58:54 PM<\/td>\n6379<\/td>\n<\/tr>\n
68.12.116.252<\/td>\n9\/7\/2004 7:12:32 PM<\/td>\n9\/7\/2004 8:58:56 PM<\/td>\n6344<\/td>\n<\/tr>\n
24.60.108.255<\/td>\n9\/7\/2004 7:12:32 PM<\/td>\n9\/7\/2004 8:58:56 PM<\/td>\n6322<\/td>\n<\/tr>\n
64.252.39.109<\/td>\n9\/7\/2004 7:12:30 PM<\/td>\n9\/7\/2004 8:58:54 PM<\/td>\n6300<\/td>\n<\/tr>\n
68.12.37.97<\/td>\n9\/7\/2004 7:12:32 PM<\/td>\n9\/7\/2004 8:58:54 PM<\/td>\n6293<\/td>\n<\/tr>\n
69.132.232.23<\/td>\n9\/7\/2004 7:12:30 PM<\/td>\n9\/7\/2004 8:58:54 PM<\/td>\n6248<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 \n<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Top 10 of source<\/em> ports\/protocols<\/caption>\n
source_port<\/th>\nprotocol<\/th>\ncount<\/th>\nmin<\/th>\nmax<\/th>\n<\/tr>\n<\/thead>\n
6346<\/td>\nUDP<\/td>\n2361<\/td>\n3\/14\/2004 12:44:46 PM<\/td>\n4\/9\/2005 6:01:58 PM<\/td>\n<\/tr>\n
1025<\/td>\nUDP<\/td>\n1510<\/td>\n2\/23\/2004 11:08:34 PM<\/td>\n4\/9\/2005 8:23:42 PM<\/td>\n<\/tr>\n
6348<\/td>\nUDP<\/td>\n1412<\/td>\n4\/3\/2004 9:27:10 AM<\/td>\n4\/9\/2005 2:27:16 PM<\/td>\n<\/tr>\n
1026<\/td>\nUDP<\/td>\n1378<\/td>\n2\/23\/2004 11:01:14 PM<\/td>\n4\/9\/2005 6:52:34 PM<\/td>\n<\/tr>\n
0<\/td>\nICMP (type:8\/subtype:0)<\/td>\n1330<\/td>\n2\/24\/2004 7:45:34 PM<\/td>\n4\/13\/2005 2:25:26 PM<\/td>\n<\/tr>\n
1027<\/td>\nUDP<\/td>\n1261<\/td>\n2\/23\/2004 11:01:42 PM<\/td>\n4\/8\/2005 8:16:46 PM<\/td>\n<\/tr>\n
1028<\/td>\nUDP<\/td>\n985<\/td>\n2\/23\/2004 10:58:52 PM<\/td>\n4\/9\/2005 8:49:54 AM<\/td>\n<\/tr>\n
1029<\/td>\nUDP<\/td>\n956<\/td>\n2\/23\/2004 11:10:40 PM<\/td>\n4\/9\/2005 8:10:46 PM<\/td>\n<\/tr>\n
137<\/td>\nUDP<\/td>\n683<\/td>\n3\/5\/2004 10:07:16 AM<\/td>\n4\/9\/2005 10:10:22 AM<\/td>\n<\/tr>\n
1030<\/td>\nUDP<\/td>\n628<\/td>\n2\/23\/2004 11:11:44 PM<\/td>\n4\/8\/2005 8:30:44 PM<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 \n<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Top 10 of destination<\/em> ports\/protocols<\/caption>\n
destination_port<\/th>\nprotocol<\/th>\ncount<\/th>\nmin<\/th>\nmax<\/th>\n<\/tr>\n<\/thead>\n
20301<\/td>\nTCP (flags:S)<\/td>\n86465<\/td>\n9\/7\/2004 7:12:30 PM<\/td>\n9\/7\/2004 8:58:56 PM<\/td>\n<\/tr>\n
1264<\/td>\nTCP (flags:S)<\/td>\n78855<\/td>\n6\/12\/2004 2:33:14 PM<\/td>\n12\/31\/2004 4:39:04 PM<\/td>\n<\/tr>\n
6346<\/td>\nTCP (flags:S)<\/td>\n33912<\/td>\n2\/23\/2004 10:32:14 PM<\/td>\n4\/9\/2005 9:08:06 PM<\/td>\n<\/tr>\n
1214<\/td>\nTCP (flags:S)<\/td>\n14260<\/td>\n2\/25\/2004 7:43:00 PM<\/td>\n4\/8\/2005 5:57:36 PM<\/td>\n<\/tr>\n
137<\/td>\nUDP<\/td>\n12571<\/td>\n2\/23\/2004 10:28:04 PM<\/td>\n4\/9\/2005 10:44:06 PM<\/td>\n<\/tr>\n
4242<\/td>\nTCP (flags:S)<\/td>\n8216<\/td>\n12\/8\/2004 8:34:46 PM<\/td>\n12\/8\/2004 10:39:34 PM<\/td>\n<\/tr>\n
3955<\/td>\nTCP (flags:S)<\/td>\n6490<\/td>\n6\/4\/2004 6:20:32 PM<\/td>\n12\/19\/2004 12:47:28 AM<\/td>\n<\/tr>\n
6881<\/td>\nTCP (flags:S)<\/td>\n5707<\/td>\n2\/25\/2004 7:41:06 AM<\/td>\n4\/5\/2005 8:21:02 PM<\/td>\n<\/tr>\n
41170<\/td>\nUDP<\/td>\n5351<\/td>\n2\/28\/2004 3:00:22 PM<\/td>\n3\/15\/2005 7:27:48 AM<\/td>\n<\/tr>\n
22408<\/td>\nTCP (flags:S)<\/td>\n5181<\/td>\n1\/21\/2005 7:23:10 AM<\/td>\n1\/22\/2005 4:09:10 AM<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"

Yesterday, I mentioned the logs that I imported into a Postgres database: today some minor cleanup and indexing\/reindexing. The full monty: The hardest hit day was on September 7th of 2004: 86803 hits in 2 hours only. I’m still collecting … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[],"_links":{"self":[{"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/posts\/1147"}],"collection":[{"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1147"}],"version-history":[{"count":0,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=\/wp\/v2\/posts\/1147\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1147"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.hoogervorst.ca\/arthur\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}