North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Worm probes

  • From: Ulf Zimmermann
  • Date: Tue Sep 18 17:14:24 2001

On Tue, Sep 18, 2001 at 03:35:46PM -0400, Smith, Rick wrote:
> 
> 
> I've seen 2,614 unique addresses.  I'd be willing to do the same.  Or
> contribute to the effort.
> 
> -----Original Message-----
> From: Ulf Zimmermann [mailto:[email protected]]
> Sent: Tuesday, September 18, 2001 2:32 PM
> To: [email protected]
> Cc: [email protected]
> Subject: Re: Worm probes
> 
> 
> 
> On Tue, Sep 18, 2001 at 01:36:48PM -0400, [email protected] wrote:
> > 
> > 
> > Along those lines, weren't there some projects last time around to find
> and
> > clean up the affected machines?  Clearly there are LOTS of vulnerable NT
> > servers still out there.  Presumably these are being responded to just
> like
> > Smurf amplifiers, and the problem is just that the admins are clueless or
> > unreachable?
> > 
> > So far the most prolific network probing us has belonged to 9NetAve, which
> > was bought by Concentric shortly before they became XO.
>  
> I got so far about 205 unique IPs from the scans. If anyone is interested
> I can put them on a webpage. Or even put quickly a script with db in
> the back for other people to provide their list of IPs.
> 
> > 
> > Kevin
> > 
> > > Hopefully the notification does some good.
> > > 
> > 
> > 
> 
> -- 
> Regards, Ulf.
> 
> ---------------------------------------------------------------------
> Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204

Little page with DB backend will be up in a few minutes I hope. Data
included is just IP, email of submitter, date and comment.

-- 
Regards, Ulf.

---------------------------------------------------------------------
Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204