Re: What ever happened to the Code Red worm?

[Sean Donelan <sean () donelan com>]

On Tue, 15 May 2007, Bruce Ediger wrote:
> For 2 or 3 years after the initial release of the Code Red (well, CRv2)
> worm, the web servers that I maintained would get a series of hits
> every month.  Beginning on about the 10th of the month, I'd see the
> first hit, and by the 18th or 19th of the month, I'd see 10 or so a day.
> This went on for (as I recall) better than 2 years.
>
> Suddenly, I stopped seeing CRv2 hits. Does anybody know what happened?

Vern Paxson, et al did some research on the "ecosystem" created by the
combination of Code Red, Code Red II and Nimda.  The servers weren't 
fixed, but the next infection supplanted the previous one.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.