North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Online DB of IPs for Nimda worm infected machines

  • From: Ulf Zimmermann
  • Date: Tue Sep 18 20:56:22 2001 
Version 3 online now.

You can enter into the text area an IP per line or if you want to
submit the logdate from your webserver logs, then you can enter
IP,date. Example:

10.10.10.10

or

10.10.10.10,18/Sep/2001:17:50:41 -0700

I also removed my entries and readded the ones by grabbing for

	grep -i /msadc/

This will add hosts several times, but as someone pointed out,
a dynamic IP can change and it could be a different host each
time.

I am going to add in a moment my log entries from my @Home
segment.

-- 
Regards, Ulf.

---------------------------------------------------------------------
Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204