Code Red growth stats

Wed Aug 1 21:30:38 UTC 2001

heh, maybe someone can take the worm code and use it to apply the IIS 
patch instead of DoS'ing the White House... :)

-C

On Wed, Aug 01, 2001 at 01:50:28PM -0700, michael at aplatform.com wrote:
> 
> Hello,
> 
> Over the course of the last 1.5 hours some hits from @home but most all
> others are not US while before most were within the US.
> 
> Michael...
> 
> On Wed, 1 Aug 2001, Dave Stewart wrote:
> 
> >
> > At 04:28 PM 8/1/2001, Stephen J. Wilcox wrote:
> >
> > >Does anyone have any theories as to why its tailing, are the thousands of
> > >vulnerable machines being patched all of a sudden? If not then why is
> > >traffic decreasing so fast when the worm just keeps searching?
> >
> > I suspect we'll see it begin to pick up a little bit... it looks like
> > Billybob is just starting to get home from work and fire up his whizbang
> > Windows 2000 machine, which he put IIS on so he can share kewl warez and
> > mp3z with his leet friends...
> >
> > I'm seeing more probes from Roadrunner and @Home hosts in the last little
> > while.
> >
> 

-- 
---------------------------
Christopher A. Woodfield		rekoil at semihuman.com

PGP Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB887618B