North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Code Red growth stats

  • From: John Fraizer
  • Date: Thu Aug 02 12:40:28 2001

On 2 Aug 2001, Sean Donelan wrote:

> On Wed, 01 August 2001, k claffy wrote:
> > also by AS and per country as of 20:00 GMT
> >
> So much for China's claim they didn't have any infected computers.
> It looks like the worm doesn't discriminated based on political
> system.

I believe that the worm checked to see if the operating system was "US
English" and if so, it would deface the webpage.  If not, it would simply
start its scanning/dDoSing.  At least, that's what I gathered from eEye's

Also note that them showing up in the summary indicates scanning
activity from China and not defacements.  So, China's claim may be
partially true.  They might not have had any defacements.  (On non-US
English systems)

John Fraizer
EnterZone, Inc