Code Red Stats

Here are my statistics on the Code Red Worm.

This worm infects MS IIS servers, but affects the internet at large. www.blackant.net has been getting a number of hits from infected servers, but this worm isn't all bad; it drew me to code stegweb, a method to transfer files using http GET requests.
Following are some graphs depicting the Code Red hits.

These are the hits attempted per 6-hour block during August 19-24

The 6-hour block is interpreted as follows:

/0      12am -  5:59am
/1       6am - 11:59am
/2      12pm -  5:59pm
/3       6pm - 11:59pm

Here is my access_log with the code red hi ts for August.

These are the hits attempted per 6-hour block during August 13-18
During the first 3 days of this block, the frequency rate of Code Red attempts decreased by half, but then the frequency rose again.

These are the hits attempted per 6-hour block during August 7-12

These are the hits attempted per 6-hour block during August 1-6

Same as above, but hits during the initial Code Red attack in July 2001.
Here is my access_log with those hits.

Look at those numbers... this is my home machine. The large number of hits is due to the newer version of Code Red which makes greater attempts to infect machines within the same B- and C- classes as itself. You can see just when Code Red v3 came onto the scene.

Since my home service provider closed off incoming port 80 (temporarily, they tell me), there were no hits after the 6th.

My mother's home machine. Lots of people within our C-class must be running IIS.