[40097] in North American Network Operators' Group
Re: Code Red growth stats
daemon@ATHENA.MIT.EDU (Dave Stewart)
Wed Aug 1 16:47:40 2001
Message-Id: <5.1.0.14.2.20010801164048.04959e58@mail.ntrnet.net>
Date: Wed, 01 Aug 2001 16:42:32 -0400
To: nanog@nanog.org
From: Dave Stewart <dbs@ntrnet.net>
In-Reply-To: <Pine.LNX.4.21.0108012124580.9320-100000@staff.opaltelecom.
net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Errors-To: owner-nanog-outgoing@merit.edu
At 04:28 PM 8/1/2001, Stephen J. Wilcox wrote:
>Does anyone have any theories as to why its tailing, are the thousands of
>vulnerable machines being patched all of a sudden? If not then why is
>traffic decreasing so fast when the worm just keeps searching?
I suspect we'll see it begin to pick up a little bit... it looks like
Billybob is just starting to get home from work and fire up his whizbang
Windows 2000 machine, which he put IIS on so he can share kewl warez and
mp3z with his leet friends...
I'm seeing more probes from Roadrunner and @Home hosts in the last little
while.
