nanog mailing list archives
Re: Code Red growth stats
From: Daniel Senie <dts () senie com>
Date: Thu, 02 Aug 2001 08:13:44 -0400
At 10:43 PM 8/1/01, Dave Stewart wrote:
At 10:35 PM 8/1/2001, Steven M. Bellovin wrote:If it has indeed turned up again, I'm at a loss to explain it. While I'm sure there are some IIS servers on home machines, I doubt there are that many. But I don't have another explanation to offer.I'd bet there are way more than we think:ac96a2b4.ipt.aol.com - - [01/Aug/2001:20:37:10 -0400] "GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 323 "-" "-"
Indeed. I've seen 1215 probes since the start of August, and a rough glance shows something like 30% or more are dialups, cable modems and DSL lines. Better than 50% appear to be addresses without INADDR.
I've written a script that produces a file of the addresses or INADDR names that appear in the probes to our web servers. We run Apache, and so are only affected insofar as there's extra load. If there's interest, I could make the resultant file available for web download, and set it up to run daily.
----------------------------------------------------------------- Daniel Senie dts () senie com Amaranth Networks Inc. http://www.amaranth.com
Current thread:
- Re: Code Red growth stats, (continued)
- Re: Code Red growth stats Joe Shaw (Aug 01)
- Re: Code Red growth stats Steven M. Bellovin (Aug 01)
- Re: Code Red growth stats k claffy (Aug 01)
- RE: Code Red growth stats Joe Blanchard (Aug 01)
- Re: Code Red growth stats Steven M. Bellovin (Aug 01)
- Re: Code Red growth stats Jasper Wallace (Aug 01)
- Re: Code Red growth stats Larry Rosenman (Aug 01)
- Re: Code Red growth stats Jasper Wallace (Aug 01)
- RE: Code Red growth stats Paul Lantinga (Aug 01)
- Re: Code Red growth stats Steven M. Bellovin (Aug 01)
- Re: Code Red growth stats Dave Stewart (Aug 01)
- Re: Code Red growth stats Daniel Senie (Aug 02)
- Re: Code Red growth stats Greg A. Woods (Aug 01)
- Re: Code Red growth stats Ryan Tucker (Aug 01)
- Re: Code Red growth stats k claffy (Aug 01)
- Re: Code Red growth stats Kevin Houle (Aug 02)
- Re: Code Red growth stats Dave Stewart (Aug 01)
- RE: Code Red growth stats Roeland Meyer (Aug 01)
- Re: Code Red growth stats Steven M. Bellovin (Aug 01)
- Re: Code Red growth stats Etaoin Shrdlu (Aug 01)
- RE: Code Red growth stats Roeland Meyer (Aug 01)
- Re: Code Red growth stats Adam Rothschild (Aug 01)
- Re: Code Red growth stats Avi Freedman (Aug 01)
(Thread continues...)