nanog mailing list archives
Re: Worm probes
From: Ulf Zimmermann <ulf () Alameda net>
Date: Tue, 18 Sep 2001 11:31:45 -0700
On Tue, Sep 18, 2001 at 01:36:48PM -0400, sigma () pair com wrote:
Along those lines, weren't there some projects last time around to find and clean up the affected machines? Clearly there are LOTS of vulnerable NT servers still out there. Presumably these are being responded to just like Smurf amplifiers, and the problem is just that the admins are clueless or unreachable? So far the most prolific network probing us has belonged to 9NetAve, which was bought by Concentric shortly before they became XO.
I got so far about 205 unique IPs from the scans. If anyone is interested I can put them on a webpage. Or even put quickly a script with db in the back for other people to provide their list of IPs.
KevinHopefully the notification does some good.
-- Regards, Ulf. --------------------------------------------------------------------- Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204
Current thread:
- RE: Worm probes, (continued)
- RE: Worm probes Mark Radabaugh - Amplex (Sep 18)
- RE: Worm probes Mark Radabaugh - Amplex (Sep 18)
- RE: Worm probes Tim Winders (Sep 18)
- Re: Worm probes Jared Mauch (Sep 18)
- Re: Worm probes Bill Larson (Sep 18)
- Re: Worm probes Christopher X. Candreva (Sep 18)
- Re: Worm probes Bill Larson (Sep 18)
- Re: Worm probes sigma (Sep 18)
- Re: Worm probes Valdis . Kletnieks (Sep 18)
- RE: Worm probes Eric Germann (Sep 18)
- Re: Worm probes Ulf Zimmermann (Sep 18)
- Re: Worm probes k claffy (Sep 18)
- Re: Worm probes Joe Abley (Sep 18)
- Re: Worm probes Daniel Senie (Sep 18)
- Re: Worm probes Iljitsch van Beijnum (Sep 18)
- Re: Worm probes M. David Leonard (Sep 19)
- Re: Worm probes Brett Frankenberger (Sep 19)