H1 2004 honeypot data:
- MyDoom and Bagle dominated mail-borne attempts.
- Sasser and Blaster residuals dominated RPC scanning.
- Witty was so brief at the population level that few captures resulted.
- General scan-and-probe traffic remains at elevated baseline.
The tempo continues. Operators continue to absorb the cost.
More as H2 develops.