Code red- Returning?

Tue Mar 18 18:05:37 UTC 2003

Code red- Returning?We're still in the propogation mode, until the 20th.

http://www.cert.org/advisories/CA-2001-23.html

Unless their clocks are off by 3 days, they're in the wrong mode ...

However, since 1100EST 3-17-03, we've seen a steady uptick also.  Also, some
other tools must be attempting to use the same exploits, but they are more
ferocious, creating thousands of attempts within a few minutes, exploiting
the same vulnerabilities.
  -----Original Message-----
  From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu]On Behalf Of
McBurnett, Jim
  Sent: Tuesday, March 18, 2003 12:50 PM
  To: nanog at merit.edu
  Subject: Code red- Returning?

  Has anyone out there noticed an increase in a Code-Red patterned virus?
  I know about the Microsoft bug that came out yesterday/last night.
  But I am seeing the same symptoms as Code Red,
  800+ hits in the last 12 hours, from the same Class A network I am on.
  The amount is increasing per hour..
  It started with 50 the first hour and now it just about 150 an hour...

  Thoughts?

  thanks,
  Jim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20030318/a6aa5551/attachment.html>