North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: Worm probes

  • From: Smith, Rick
  • Date: Tue Sep 18 16:37:54 2001

I've seen 2,614 unique addresses.  I'd be willing to do the same.  Or
contribute to the effort.

-----Original Message-----
From: Ulf Zimmermann [mailto:[email protected]]
Sent: Tuesday, September 18, 2001 2:32 PM
To: [email protected]
Cc: [email protected]
Subject: Re: Worm probes

On Tue, Sep 18, 2001 at 01:36:48PM -0400, [email protected] wrote:
> Along those lines, weren't there some projects last time around to find
> clean up the affected machines?  Clearly there are LOTS of vulnerable NT
> servers still out there.  Presumably these are being responded to just
> Smurf amplifiers, and the problem is just that the admins are clueless or
> unreachable?
> So far the most prolific network probing us has belonged to 9NetAve, which
> was bought by Concentric shortly before they became XO.
I got so far about 205 unique IPs from the scans. If anyone is interested
I can put them on a webpage. Or even put quickly a script with db in
the back for other people to provide their list of IPs.

> Kevin
> > Hopefully the notification does some good.
> > 

Regards, Ulf.

Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204