Hard data on network impact of the "Code Red" worm?

Mon Jul 30 17:22:18 UTC 2001

> > I would agree those people may have been severely affected.  But 350,000
> > hosts isn't that big of a number any more.  The Morris Internet Worm
> 
> That's 350K hosts that got infected *that we know about*.  I'd not be
> surprised if a lot of other hosts got infected during the 9 hours CRv2
> was on its burn stage that didn't happen to ping any of the sensor boxes
> used to identify infected hosts.

Do "we" have any information how many out here at the edges (besides the.mil
folk) disconnected while the cleanup was going on?

We dint, but small pockets that we supply did.

Alos, is it possible that the critter got through firewalls and "did harm",
but could not get back out again?  I don't know of any cases like that.
--
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
.                                                                       .
- L. F. (Larry) Sheldon, Jr.                                            -
. Unix Systems and Network Administration                               .
- Creighton University Computer Center-Old Gym                          -
. 2500 California Plaza                                                 .
- Omaha, Nebraska, U.S.A.  68178       Two identifying characteristics  -
. lsheldon at creighton.edu                  of System Administrators:     .
- 402 280-2254 (work)                Infallibility, and the ability to  -
. 402 681-4726 (cellular)               learn from their mistakes.      .
- 402 332-4622 (residence)                                              -
. http://www.creighton.edu/~lsheldon    Adapted from Stephen Pinker     .
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-