The SecuriTeam blog mentions that the number has shot up, but also that the counter is showing hits, rather than unique addresses.

See http://blogs.securiteam.com/inde...hp/archives/ 244 for their explanation.
Jamie Anderson | 01.25.06 - 5:02 pm | #

It was only at 730,000 early this morning. The worm writer or some other hacker could be over inflating the hits with a simple script.

If hit stats were trusted affiliates would be rich!
Richard Stiennon | Homepage | 01.25.06 - 6:31 pm | #

Though not part of the security community "inner circle", I used the SANS diary and other published research to guess the counter url quite quickly. Surely those with mischiefous intent could do (or have done) the same.
Steve | 01.25.06 - 8:12 pm | #

Maybe we should all set a restore point or disk image for the 2nd of Feb, just in case.
A Chicken Passeth By | 01.25.06 - 8:45 pm | #

Not that I tested, but one would think (hope?) the counter logs uniqs.
Paul Laudanski | Homepage | 01.25.06 - 9:08 pm | #