On Wed, 1 Aug 2001 21:32:15 -0500
"Mike Hicks" <hick0088 at tc.umn.edu> wrote:

> Hmm.  Did I have a brainfart, or did I read that code red generates a
new
> list of 100 IP addresses to attack each day?  That would explain the
> numbers going up again around midnight GMT.

The info that I heard, was that CodeRed starts 100 new threads on the
comprimised host, each which in turn begins to send out attacks.. I don't
recall where I saw this (naturally).

                           -.bill.layer.-
                          
-.those who are talking don't know, and those who know aren't talking.-

           -.frogtown.-     -.minnesota.-      -.u.s.a.-