Abstract: A system and method for detecting mass addressing events comprising a first register, a second register, a first counter, and a second counter is disclosed. Potential mass addressing events are detected by comparing a most recently selected address to the contents of the first register and incrementing the first counter if they are equal, or loading the most recently selected address into the first register and initializing the first counter if they are unequal. If the first counter's count reaches a first count threshold, the contents of the first register are compared to the contents of the second register and the second counter is incremented if they are equal, or, if they are unequal, the contents of the first register are loaded into the second register and the second counter is initialized. If the second counter's count reaches a second count threshold, an alarm is issued.