[Xitami] "default.ida?"

Paul Reid xitami@lists.xitami.org
Mon, 06 Aug 2001 13:41:33 -0400


> This site isn't even a very well known or popular site. 

Does not matter. This isn't SirCam that looks in Address Book and
Browser Cache for targets. 

CodeRed uses a pseudo-random number generator to pick IP numbers to hit.
It had a non-random bias, so a certain few sites got hit a LOT. But with
enough copies of CodeRed running in the world, eventually it will hit
every IP number. 

The newest mutant of CodeRed has a better number generator that is
biased towards IP numbers in the same range as the machine it is on. 

 -PRR