This paper contains the results of data analysis from trap servers. Due to the design features of the network of trap servers, any access is considered unauthorized. The data processing is considered for iptables firewall logs. As a result, a list of attacking addresses was identified for 10 major Internet services, and the intensity of attacks was determined. For web hosting traffic control systems, the classification of attacking requests is given.