A watched pot never boils: The Return of Code Red

I checked my apache logs this morning, and I do see some Code Red
activity:

We've seen > 800 attacks so far. The growth rate is a clear exponential,
no sign of any slowdown yet.

    Vern

Attached is a plot of what we've seen so far. It's based on
router ACL hits on port 80 for a /22 worth of address space,
extrapolated to cover our entire /19 (hits x 8). We're currently
seeing something in the region of 0.5 - 0.6 attempts/second across
the /19.

Times are UTC.

-Ronan

codered-20010801.png

> I checked my apache logs this morning, and I do see some Code Red
> activity:

We've seen > 800 attacks so far. The growth rate is a clear exponential,
no sign of any slowdown yet.

Yup. See: http://www.incidents.org, but slower than the first time around.

-Hank