Re: Code Red seems to be back.

2001-09-18 Thread John Young
The worm hit Cryptome at 8:43 AM EST and is now sucking at a rate of about 90% of the load. As others have noted, the bulk of the hits appear to be coming from our own ISP, either by design or by spoofing the origin. Our server is on Apache but the worm generates endless errors attempting to find

Re: Code Red seems to be back.

2001-09-18 Thread David Honig
At 09:49 AM 9/18/01 -0700, Bill Stewart wrote: >Seems like Code Red or one of its little friends is back. > This one supposedly uses both http servers and email (MS of course) to propogate. Even read that visiting an infected web site can cause client infection, but we'll have to await the auto

Re: Code Red seems to be back.

2001-09-18 Thread Adam Shostack
On Tue, Sep 18, 2001 at 09:49:30AM -0700, Bill Stewart wrote: | Somebody did a paper about a hypothetical "Andy Warhol Virus", | studying how long it takes to take over a server, | how many servers you can attack per minute, and | what it would take to coordinate an attack that really hit everywhe