Security Incidents mailing list archives

Forwarded: 13:00 EDT http scan update from cas.org [CERT#36881]


From: Ken Eichman <keichman () cas org>
Date: Wed, 1 Aug 2001 13:37:18 -0400 (EDT)

Totals through 13:00 EDT against our class-b address space as
recorded by our IDS.

            Bogus HTTP Scans
            During the Hour
            Related to       # Unique IP Source Addresses
Date  Hour  Code Red           Scanning During the Hour
----- ----  ---------------  ----------------------------
07/31   22       19                   4
07/31   23       27                   8
08/01   00      275                  76
08/01   01      577                 157
08/01   02      917                 252
08/01   03     1931                 495
08/01   04     3445                 893
08/01   05     5917                1591
08/01   06    10896                2881
08/01   07    18097                4792
08/01   08    30300                8007
08/01   09    51543               13487
08/01   10    83563               22001
08/01   11   124072               32502
08/01   12   161961               41968

08/01 Totals so far

08/01 Total Scans:                           493548
08/01 Total Unique Source Addresses:          79789

08/01 Total Code Red probes recorded by snort:  169

Ken Eichman                  Senior Security Engineer
Chemical Abstracts Service   Tel:   (614) 447-3838 ext 3230
2540 Olentangy River Road    Fax:   (614) 447-3855
Columbus, OH 43210           Email: keichman () cas org

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: