Code Red attacker growth hit plateau - collateral effect on networked HP printers

H. Morrow Long morrow.long at yale.edu
Thu Aug 2 16:20:37 GMT 2001


Here is what we have seen of CodeRed attacking us from the Internet
from 7/31 at 9PM until noon today (8/2).  We have seen collateral
effects to networked printers with Web interface services.  How
long will this continue?

When graphed (see graph at www.yale.edu/its/security/code-red.html)
it closely resembles the same shape as the graph at www.incidents.org.

Unique Internet CodeRed Attackers (IP addresses attacking Yale) Per Hour:
07/31-09P 0
07/31-10P 3
07/31-11P 0
08/01-00 2
08/01-01 3
08/01-02 7
08/01-03 10
08/01-04 39
08/01-05 51
08/01-06 89
08/01-07 149
08/01-08 250
08/01-09 406
08/01-10 630
08/01-11 851
08/01-12 1150
08/01-13 1656
08/01-14 1611
08/01-15 1636
08/01-16 1742
8/1-5P 1630
8/1-6P 1547
8/1-7P 1464
8/1-8P 1486
8/1-9P 1513
8/1-10P 1815
8/1-11P 1884
8/2-0A 1856
8/2-1A 1841
8/2-2A 1849
8/2-3A 1874
8/2-4A 1856
8/2-5A 1805
8/2-6A 1704
8/2-7A 1906
8/2-8A 1846
8/2-9A 1870
8/2-10A 1790
8/2-11A 1655

- H. Morrow Long
  University Information Security Officer
  Yale University, ITS, Dir. InfoSec Office
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4243 bytes
Desc: S/MIME Cryptographic Signature
Url : http://www.dshield.org/pipermail/unisog/attachments/20010802/0159fb7c/smime-0007.bin


More information about the unisog mailing list