nanog mailing list archives

Re: Code Red growth stats


From: <michael () aplatform com>
Date: Wed, 1 Aug 2001 13:50:28 -0700 (PDT)


Hello,

Over the course of the last 1.5 hours some hits from @home but most all
others are not US while before most were within the US.

Michael...

On Wed, 1 Aug 2001, Dave Stewart wrote:


At 04:28 PM 8/1/2001, Stephen J. Wilcox wrote:

Does anyone have any theories as to why its tailing, are the thousands of
vulnerable machines being patched all of a sudden? If not then why is
traffic decreasing so fast when the worm just keeps searching?

I suspect we'll see it begin to pick up a little bit... it looks like
Billybob is just starting to get home from work and fire up his whizbang
Windows 2000 machine, which he put IIS on so he can share kewl warez and
mp3z with his leet friends...

I'm seeing more probes from Roadrunner and @Home hosts in the last little
while.



Current thread: