North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Sobig.f surprise attack today

  • From: Andrew Kerr
  • Date: Fri Aug 22 15:48:48 2003 
Jay Hennigan wrote:

On Fri, 22 Aug 2003, Andrew Kerr wrote:



Its been posted here, and f-secure has it, but I wrote a quick script to
keep an eye on the 20 servers and dump the output to a simple page:

http://207.195.54.37/sobig.html

(Updates about every 5 mins)

You're probing the list of NTP servers the worm uses to get the date, not
the list of hosts to which it "phones home".

A few people pointed that out. By the time this message hits the list, it should be corrected.