| 1 |
Testing class. |
0 |
| 2 |
Sample data used for heruistical analysis |
0 |
| 3 |
IRC spam drone (litmus/sdbot/fyle) |
71831 |
| 5 |
Bottler (experimental) |
1 |
| 6 |
Unknown worm or spambot |
14894 |
| 7 |
DDoS drone |
381441 |
| 8 |
Open SOCKS proxy |
195624 |
| 9 |
Open HTTP proxy |
391992 |
| 10 |
Proxychain |
5603 |
| 11 |
Web Page Proxy |
0 |
| 12 |
Open DNS Resolver |
694 |
| 13 |
Automated dictionary attacks |
243 |
| 14 |
Open WINGATE proxy |
0 |
| 15 |
Compromised router / gateway |
5766 |
| 16 |
Autorooting worms |
84 |
| 17 |
Automatically determined botnet IPs (experimental) |
7445 |
| 18 |
Possibly compromised DNS/MX type hostname detected on IRC |
487 |
| 255 |
Uncategorized threat class |
5 |
