Re: A watched pot never boils: The Return of Code Red

[Ronan Mullally <ronan () iol ie>]

Attached is a plot of what we've seen so far.  It's based on
router ACL hits on port 80 for a /22 worth of address space,
extrapolated to cover our entire /19 (hits x 8).  We're currently
seeing something in the region of 0.5 - 0.6 attempts/second across
the /19.

Times are UTC.


-Ronan


On Wed, 1 Aug 2001, Vern Paxson wrote:

> > I checked my apache logs this morning, and I do see some Code Red
> > activity:
>
> We've seen > 800 attacks so far.  The growth rate is a clear exponential,
> no sign of any slowdown yet.
>
>               Vern