[21679] in bugtraq
Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm.
daemon@ATHENA.MIT.EDU (Vern Paxson)
Thu Jul 19 20:44:57 2001
Message-Id: <200107192333.f6JNXJH15230@daffy.ee.lbl.gov>
To: Joe Harris <cdi@thewebmasters.net>
Cc: BUGTRAQ <BUGTRAQ@securityfocus.com>
In-reply-to: Your message of Thu, 19 Jul 2001 11:30:44 PDT.
Date: Thu, 19 Jul 2001 16:33:19 PDT
From: Vern Paxson <vern@ee.lbl.gov>
> This one's gonna be bad.
Oh yes.
Yesterday (pre-worm), about 1,600 different remote hosts attempted to
connect to web servers in the lbl.gov IP space for which no server was
listening. This is the typical background rate (previous day was 1,300.)
So far today, it's been 1.17 million different remote hosts.
Vern
