Re: graphical stats of new SQL worm

From: abrettenat_private
Date: Sun Jan 26 2003 - 20:21:13 PST

Next message: Carlo Ottaviani: "Re: SNMP Weirdness"

Previous message: kris carlier: "Re: strange traffic"
Maybe in reply to: Mark J. Lastdrager: "graphical stats of new SQL worm"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I'm graphing out hits against a /16, was getting 100 hits/second at 6am
Sunday EST, its around 65 hits/second at 11:20pm Sunday EST and has been
trending down quite steadily for the last 12 hours.

The graph is not available to the public right now, it may be in the future
or by request.

Andy Bretten



                                                                                                                                       
                      "Mark J.                                                                                                         
                      Lastdrager"              To:       incidentsat_private                                                   
                      <mark.lastdrager@        cc:       bugtraqat_private, listat_private                                   
                      pine.nl>                 Subject:  graphical stats of new SQL worm                                               
                                                                                                                                       
                      01/25/2003 10:47                                                                                                 
                      AM                                                                                                               
                                                                                                                                       
                                                                                                                                       




Hi,

Since approx. 15:00 GMT, we are generating statistics of the new SQL
worm on a /19 (8192 "target" IP numbers). At this moment we see about
800 hits/minute of this worm. You can find the graph at
http://www.security.nl/misc/sqlworm/hits.png

Let's see how long this thing will stay alive..

Mark Lastdrager

--
Vice President Operations :: Pine Digital Security :: tel. +31-70-3111010
PGP id 0xFF0EA728 fpr 57D2 CD16 5908 A8F0 9F33 AAA3 AFA0 24EF FF0E A728

----------------------------------------------------------------------------

This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com









----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Carlo Ottaviani: "Re: SNMP Weirdness"
Previous message: kris carlier: "Re: strange traffic"
Maybe in reply to: Mark J. Lastdrager: "graphical stats of new SQL worm"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jan 27 2003 - 09:14:07 PST