growth rate of Code Red

From: Keith Duemling (webmaster@nothingisnext.com)
Date: 07/20/01


From: "Keith Duemling" <webmaster@nothingisnext.com>
To: <security-basics@securityfocus.com>
Subject: growth rate of Code Red
Date: Thu, 19 Jul 2001 22:13:27 -0700
Message-ID: <OGEIKOFIGOEMKPOMDHMMCECACDAA.webmaster@nothingisnext.com>

Could it be possible that the unexpected growth rate of this worm earlier
today could be the result of more robust systems becoming infected.
Assuming that the worm starts at a beginning point, it might take more time
initially to cycle up towards some of the higher IP ranges. In some of
these ranges could be servers unprotected that are robust enough to sustain
the resource drain and spread the worm quicker. Course without the start
point...or the path it has taken...this is pure speculation.

thoughts??

Keith Duemling