Skip to content
Permalink
main
Switch branches/tags

web-hack-mirror/mirror/stats.html

Go to file
 
 
Cannot retrieve contributors at this time
227 lines (189 sloc) 6.62 KB
Raw Blame
Open in GitHub Desktop
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlsn="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>
Attrition Defacement Statistics
</title>
</head>
<body bgcolor="#000000" text="#FFFFFF" link="#FF0000" vlink="#C0C0C0" alink="#FF0000">
<!--
Hand made with emacs. Anything else is just greasy kid stuff.
-->
<h1>
Attrition Defacement Statistics
</h1>
<hr noshade />
<p>
Please read the <a href="#NOTES">NOTES</a>.
</p>
<hr noshade />
<p>
<b>NEWS</b><br />
</p>
<p>
The OS graphs are up-to-date through April, 2001.<br />
<b>NOTE: I have collapsed all BSD and Solaris into the "All Other" category.</b><br />
Trends in Defacements by Operating System, August, 1999 through
April, 2001
<a href="os-graphs.html">Operating System Graphs</a>
</p>
<p>
Defacement table categorized by Country and TLD (Top Level Domain), including
Banks, Churches, Police Stations (Over 70 Linked pages by Domain):<br />
<a href="country.html">Country and TLD breakdown</a>
</p>
<p>
As previously announced on the
<a href="/security/commentary/">defaced-commentary</a>
list, Top Level Domain summary data for the years 1999-2000 is now updated.
This is data that relates to TLDs only; find it <a href="tldlogs/">here</a>
as well as the <a href="tldlogs/tldlogs.tar.gz">tar-ball</a> of the logs for
the entire archive.
</p>
<p>
The OS Tables <a href="os.html">page</a> is now up-to-date, and
should be on a daily basis. It had been busted since at least late
summer. Funny, I used to get email about those sorts of things. I'm
guessing that the usually up-to-date <a href="os-graphs.html">os-graphs</a>
have diverted traffic from it, which is too bad, since the tables
have a finer-grained OS definition (NT-Windows 2000, BSD, Linux
distros, and the "Other" category broken down, for instance),
and not only that, you can use them for making your own graphs
as well...
</p>
<p>
W00. A nice new total tables page is now up. I think
you will like it:<br />
<a href="annuals.html">
Annual, Monthly, Defacements per Day Tables and Spiff-Chart<br />
</a>
</p>
<p>
<b>Updated</b>: Total Defacement Trends, January 1999 - December,
2000:<br />
<a href="defacements-graphs.html">Total Defacement Graphs</a>
</p>
<p>
Trends in Defacements by Webserver, August, 1999 - November, 2000:<br />
<a href="webserver-graphs.html">Webserver Graphs</a> (And please read
the updated
<a href="webserver-graphs.html#NOTES">NOTES</a>
for these graphs!)
</p>
<p>
Defacements counts by year, month, and since August 1999, Operating
System:<br />
<a href="os.html">Operating System Tables</a>
</p>
<p>
Other <a href="#OTHER">Resources</a>
</p>
<p>
<a href="#DERBY">Subpoena</a> Derby.
</p>
<!-- Insert stat o'month -->
<a name="STAT"></a>
<hr noshade />
<p>
<h3>
Statistic of the Month
</h3>
<h4>
Suggestions?
</h4>
<pre></pre>
<p>
If you have an idea for a statistic you'd like to see from
the mirror, feel free to email me your suggestions:
<a href="mailto:munge@attrition.org">munge@attrition.org</a>
</p>
<a name="DERBY"></a>
<p>
<b>Subpoena Stats</b><br />
Two 2703d Subpoenas has been delivered under seal. The first requested
information on two individuals. Apparently the FBI thought it
easier than delivering two seperate subpoenas. The second was to obtain
information on a single individual ('pimpshiz'). A third subpoena was
delivered after the mirror was discontinued by the US Postal Service.
</p>
<hr noshade />
<a name="NOTES"></a>
<p>
<b>NOTES</b>:
</p>
<p>
It <b>SHOULD</b> go without saying that not all defacements are
reported to Attrition, Attrition does not get every defacement
that is reported to us, and that these statistics refer
<b>only</b> to our archive.
</p>
<p>
All of the tallies, graphs, tables, and etc., count each
<a href="http://www.attrition.org/mirror/attrition/notes.html#mass">
"Mass Hack"</a> as one defacement unless otherwise stated.
</p>
<p>
These statistics are prepared with a combination of Perl and a
commercial statistics package,
<a href="http://www.stata.com">Stata</a>.
All graphics are from Stata.
</p>
<p>
Discrepancies: Yes. The <a href="os.html">easiest</a> discrepancy
to find is between total defacements and adding up the totals for
each month. On one hand, a total and accurate count of the entire
archive is desired, on the other, when we do date-based calculations
or tallies, we kick out incomplete dates. Since we have a number of
mirrors that don't have a complete date, the date-based calculations
and the total count differ. Most of the incomplete dates are from
or before early 1999.
</p>
<p>
<a name="OTHER">Other Resources:</a><br />
</p>
<p>
The Bugtraq Vulnerability Database Statistics <br />
<a href="http://www.securityfocus.com/vulns/stats.shtml">
http://www.securityfocus.com/vulns/stats.shtml</a>
</p>
<p>
The Netcraft Web Server Survey <br>
<a href="http://www.netcraft.com/survey/">
http://www.netcraft.com/survey/</a>
</p>
<p>
The E-Soft Web Server Survey <br>
<a href="http://www.securityspace.com/s_survey/data/">
http://www.securityspace.com/s_survey/data/</a>
</p>
<p>
<!--===== Break =====-->
<hr />
Something look wrong? Suggestions? Inquiries?
<address>
<a href="mailto:munge@attrition.org">
munge@attrition.org
</a>
</address>
<p>
<font size="2">
&#169; 1999-2001 Copyright Matt Dickerson and Brian Martin<br>
Excerpts from this page may be reproduced if
<a href="http://www.attrition.org">
Attrition</a> and the URL<br />
http://www.attrition.org/mirror/attrition/stats.html are attributed.
</p>
<!-- Created: Sun Jan 30 14:20:55 CST 2000 -->
<p>
<!-- hhmts start -->
Last modified: Thu Dec 6 08:18:50 EST 2001
<!-- hhmts end -->
</p>
</font>
<!-- (C) HTML and content. Copyright 1999-2001 Matt Dickerson -->
<munge></munge>
<!--===== End =====-->
</body>
</html>