Jan 2013 ADSL Router Analysis

I have now completed 12 months of collecting the log files from my ADSL router and moving into the second year of data collection. I will be looking at how 2013 data matches up against the 2012 data on a month per month basis.

Source IP addresses are the source address from the packet(s) detected, it is not necessarily the true source of the attack.

Year	Countries	Source IPs	Attacks
2012	6	86	96
2013	6	44	115

The format that attacks from Turkey are effectively 1 attack from each IP address and the Chinese model of multiple attacks from an IP address is also consistent.

2012			2013
Country	Source IPs	Attacks	Country	Source IPs	Attacks
Turkey	79	79	Turkey	39	39
South Africa	3	3	China	1	57
United States	1	10	Germany	6	6
Hong Kong	1	1	Switzerland	6	6
Thailand	1	1	United States	6	6
Switzerland	1	1	United Kingdom	1	6