[NTLUG:Discuss] Red Worm flood on port 80

[Michael Patrick]

On Mon, Aug 06, 2001 at 12:25:27AM -0500, Travis Bell wrote:
> July and 794 so far in August.  479 of the 794 were on 8/5, and 467 of
> those were from the newest CRv2b strain (CRv2b).

http://www.techiesplace.com/admin/mrtg/codered.html is a chart of my codered hits

Final tally for yesterday, 8/5, was about 500 on one IP.  Most were from other @Home addresses.

> 
> I just hope this doesn't cause @Home to crack down on their webserver
> policy.  We aren't supposed to run them anyway, but in the past they
> haven't cared too much so long as you don't get a lot of traffic.
> 

Amen to that.  I'm trying to get everything moved to my new colo machine though, just in case.

Michael