[40099] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Code Red growth stats

daemon@ATHENA.MIT.EDU (michael@aplatform.com)
Wed Aug 1 16:54:15 2001

Date: Wed, 1 Aug 2001 13:50:28 -0700 (PDT)
From: <michael@aplatform.com>
To: Dave Stewart <dbs@ntrnet.net>
Cc: <nanog@nanog.org>
In-Reply-To: <5.1.0.14.2.20010801164048.04959e58@mail.ntrnet.net>
Message-ID: <Pine.LNX.4.33.0108011349340.8129-100000@aplatform.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu


Hello,

Over the course of the last 1.5 hours some hits from @home but most all
others are not US while before most were within the US.

Michael...

On Wed, 1 Aug 2001, Dave Stewart wrote:

>
> At 04:28 PM 8/1/2001, Stephen J. Wilcox wrote:
>
> >Does anyone have any theories as to why its tailing, are the thousands of
> >vulnerable machines being patched all of a sudden? If not then why is
> >traffic decreasing so fast when the worm just keeps searching?
>
> I suspect we'll see it begin to pick up a little bit... it looks like
> Billybob is just starting to get home from work and fire up his whizbang
> Windows 2000 machine, which he put IIS on so he can share kewl warez and
> mp3z with his leet friends...
>
> I'm seeing more probes from Roadrunner and @Home hosts in the last little
> while.
>


home help back first fref pref prev next nref lref last post