North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Code Red 2 cleanup; reporting..

  • From: Andrew McNamara
  • Date: Thu Aug 09 03:43:22 2001

>    Yes, I think that your observation is obvious.. publishing lists of
>infected hosts is a bad idea.     My question was asking if there was an
>unofficial mitigation process to notify the end-use and/or the providers
>involved for clean-up efforts.

I'm not sure if this is what you are asking for, but SecurityFocus is
operating a Code Red notification service:

Date: Sun, 5 Aug 2001 10:50:22 -0600
To: [email protected]
From: [email protected]
Subject: Infection Notification
--------

If you'd like to help us notify users they are infected please send
offending IP data to [email protected] Please use the
following format:

IP ADDRESS DATE/TIME WITH TIMEZONE

Or something similar to this. Please ensure the information is
constrained to IP address and date per line as we do our notification
automatically and our systems need to be able to understand the
data you send us.

-- 
Elias Levy
SecurityFocus.com
http://www.securityfocus.com/
Si vis pacem, para bellum


 ---
Andrew McNamara (System Architect)

connect.com.au Pty Ltd
Lvl 3, 213 Miller St, North Sydney, NSW 2060, Australia
Phone: +61 2 9409 2117, Fax: +61 2 9409 2111