[sanesecurity] Re: Script update

  • From: Wolfgang Zeikat <wolfgang.zeikat@xxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Sat, 10 Sep 2011 02:36:16 +0200

On 2011-09-09 02:33, Bill Landry wrote:

> Well, this really doesn't tell us anything as the hit counts need to
> be correlated to overall hit rates from all other signatures database
> during that time frame, as well.

I see your point, sorry.

I attach last week's results from 3 parallel hosts, let me know if you 
want the weeks before that, too - and if you rather want them off the 
list.

Regards,

wolfgang

host1
From Sun Aug 28 04:05:21 2011 through Sun Sep  4 04:05:40 2011 
     10 Sanesecurity SpamL
    139 Sanesecurity Phishing
     13 ScamNailer Phish
    148 Sanesecurity Junk
     14 Sanesecurity ScamL
      1 Doppelstern Lott
      1 Sanesecurity Spam4
      1 winnow botnet
    282 Sanesecurity Jurlbl
    288 INetMsg SpamDomain-2m
      2 Sanesecurity SpamAttach
      2 Sanesecurity Spear
     30 Sanesecurity Lott
     39 Doppelstern Scam4
      4 Doppelstern Attachment
      4 Sanesecurity Dipl
     50 Doppelstern Junk
      5 Sanesecurity Malware
     60 Sanesecurity Spam
      6 Sanesecurity Rogue
    791 INetMsg SpamDomain-2w
      8 Doppelstern Loan
      8 Sanesecurity SpearL
     98 Sanesecurity Scam4
      9 Doppelstern Phishing

host2
From Sun Aug 28 04:05:21 2011 through Sun Sep  4 04:05:30 2011 
    109 Sanesecurity Scam4
     11 Sanesecurity SpearL
    162 Sanesecurity Junk
    162 Sanesecurity Phishing
      1 Doppelstern Lott
      1 Sanesecurity Casino
      1 Sanesecurity Dipl
      1 winnow phish
    276 INetMsg SpamDomain-2m
    287 Sanesecurity Jurlbl
     28 Doppelstern Scam4
      2 Doppelstern Attachment
      2 Sanesecurity Stk
     30 ScamNailer Phish
     36 Sanesecurity Lott
      3 Sanesecurity Rogue
      3 Sanesecurity SpamAttach
      4 Sanesecurity Spear
     59 Doppelstern Junk
      5 Doppelstern Loan
     65 Sanesecurity Spam
      6 Sanesecurity ScamL
      7 Doppelstern Phishing
      7 Sanesecurity SpamL
    817 INetMsg SpamDomain-2w
      9 Sanesecurity Malware

host3
From Sun Aug 28 04:05:21 2011 through Sun Sep  4 04:08:28 2011 
     10 Sanesecurity ScamL
     10 Sanesecurity SpearL
    119 Sanesecurity Phishing
    138 Sanesecurity Junk
     13 Sanesecurity Malware
      1 Doppelstern Lott
      1 Sanesecurity Hdr
      1 Sanesecurity Spam4
     23 ScamNailer Phish
    241 Sanesecurity Jurlbl
      2 Sanesecurity SpamAttach
      2 Sanesecurity Stk
    313 INetMsg SpamDomain-2m
      3 Doppelstern Attachment
      3 Sanesecurity Casino
      3 Sanesecurity Dipl
     44 Doppelstern Junk
     45 Sanesecurity Lott
      4 Sanesecurity Rogue
     52 Doppelstern Scam4
      5 Doppelstern Loan
      5 Sanesecurity Spear
      6 Doppelstern Phishing
     71 Sanesecurity Spam
    814 INetMsg SpamDomain-2w
      8 Sanesecurity SpamL
     99 Sanesecurity Scam4

Other related posts: