[40262] in North American Network Operators' Group
Re: Code Red variants
daemon@ATHENA.MIT.EDU (mike harrison)
Sun Aug 5 11:07:06 2001
Date: Sun, 5 Aug 2001 11:06:28 -0400 (EDT)
From: mike harrison <meuon@highertech.net>
To: Jeff Ogden <jogden@merit.edu>
Cc: "nanog@merit.edu" <nanog@merit.edu>
In-Reply-To: <v04210103b79263457937@[198.108.90.150]>
Message-ID: <Pine.LNX.4.10.10108051105590.8587-100000@home.highertech.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
> Do we know if anyone has looked at the code for variants of the worn
> in detail recently? I've seen announcements about new versions with
> better random IP address generation. Does anyone know if other
> aspects of the worm are the same? Is it still set to spread itself
www.incidents.org and www.dshield.org are reporting on them in some
detail.
