Re: graphical stats of new SQL worm

From: abretten@kroger.com
Date: 01/27/03

  • Next message: Carlo Ottaviani: "Re: SNMP Weirdness"
    To: "Mark J. Lastdrager" <mark.lastdrager@pine.nl>
    From: abretten@kroger.com
    Date: Sun, 26 Jan 2003 23:21:13 -0500
    
    

    I'm graphing out hits against a /16, was getting 100 hits/second at 6am
    Sunday EST, its around 65 hits/second at 11:20pm Sunday EST and has been
    trending down quite steadily for the last 12 hours.

    The graph is not available to the public right now, it may be in the future
    or by request.

    Andy Bretten

                                                                                                                                           
                          "Mark J.
                          Lastdrager" To: incidents@securityfocus.com
                          <mark.lastdrager@ cc: bugtraq@securityfocus.com, list@dshield.org
                          pine.nl> Subject: graphical stats of new SQL worm
                                                                                                                                           
                          01/25/2003 10:47
                          AM
                                                                                                                                           
                                                                                                                                           

    Hi,

    Since approx. 15:00 GMT, we are generating statistics of the new SQL
    worm on a /19 (8192 "target" IP numbers). At this moment we see about
    800 hits/minute of this worm. You can find the graph at
    http://www.security.nl/misc/sqlworm/hits.png

    Let's see how long this thing will stay alive..

    Mark Lastdrager

    --
    Vice President Operations :: Pine Digital Security :: tel. +31-70-3111010
    PGP id 0xFF0EA728 fpr 57D2 CD16 5908 A8F0 9F33 AAA3 AFA0 24EF FF0E A728
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    


    Relevant Pages

    • RE: A small quandary
      ... This list is provided by the SecurityFocus ARIS analyzer service. ... and tracking system please see: http://aris.securityfocus.com ... For more information on this free incident handling, management ...
      (Incidents)
    • RE: Anyone seen this before?
      ... The answer to this is, in task manager, you can right click on any app ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)
    • Re: fbi.gov weirdness?
      ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)
    • Re: Code Red - A Possible Origin?
      ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)
    • Re: Code Red - A Possible Origin?
      ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)