Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm.

[Vern Paxson]

> This one's gonna be bad.

Oh yes.

Yesterday (pre-worm), about 1,600 different remote hosts attempted to
connect to web servers in the lbl.gov IP space for which no server was
listening.  This is the typical background rate (previous day was 1,300.)

So far today, it's been 1.17 million different remote hosts.

                Vern