[40080] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: A watched pot never boils: The Return of Code Red

daemon@ATHENA.MIT.EDU (Ronan Mullally)
Wed Aug 1 10:41:23 2001

Date: Wed, 1 Aug 2001 15:40:54 +0100 (IST)
From: Ronan Mullally <ronan@iol.ie>
To: Vern Paxson <vern@ee.lbl.gov>
Cc: <nanog@merit.edu>
In-Reply-To: <200108011423.f71ENjB09338@daffy.ee.lbl.gov>
Message-ID: <Pine.LNX.4.33.0108011531300.30770-100001@wumpus.digiserve.ie>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-1463795455-90766040-996676854=:30770"
Errors-To: owner-nanog-outgoing@merit.edu


  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

---1463795455-90766040-996676854=:30770
Content-Type: TEXT/PLAIN; charset=US-ASCII

Attached is a plot of what we've seen so far.  It's based on
router ACL hits on port 80 for a /22 worth of address space,
extrapolated to cover our entire /19 (hits x 8).  We're currently
seeing something in the region of 0.5 - 0.6 attempts/second across
the /19.

Times are UTC.


-Ronan


On Wed, 1 Aug 2001, Vern Paxson wrote:

>
> > I checked my apache logs this morning, and I do see some Code Red
> > activity:
>
> We've seen > 800 attacks so far.  The growth rate is a clear exponential,
> no sign of any slowdown yet.
>
> 		Vern
>
>

---1463795455-90766040-996676854=:30770
Content-Type: IMAGE/png; name="codered-20010801.png"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.33.0108011540540.30770@wumpus.digiserve.ie>
Content-Description: 
Content-Disposition: attachment; filename="codered-20010801.png"
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---1463795455-90766040-996676854=:30770--

home help back first fref pref prev next nref lref last post