Work in progress.
A rough state of the infestation at 15/02/2005 can be obtained by
organizing the 864 collected tables in a "ring"
as we have done at :
http://www.douillet.info/~douillet/ansecpb/ring_02/
Sorted by ip, by number of lines, by number of names and by hits per line, the corresponding "more than twice" entries are :
http://www.douillet.info/~douillet/ansecpb/ring_02/final_table_lin.html
These tables are not as accurate as they could be, due to a not so good identification of the requests that where local to a given site (should be fixed).