nanog mailing list archives
RE: Worm probes
From: "Smith, Rick" <rsmith () atsworld com>
Date: Tue, 18 Sep 2001 15:35:46 -0400
I've seen 2,614 unique addresses. I'd be willing to do the same. Or contribute to the effort. -----Original Message----- From: Ulf Zimmermann [mailto:ulf () Alameda net] Sent: Tuesday, September 18, 2001 2:32 PM To: sigma () pair com Cc: nanog () merit edu Subject: Re: Worm probes On Tue, Sep 18, 2001 at 01:36:48PM -0400, sigma () pair com wrote:
Along those lines, weren't there some projects last time around to find
and
clean up the affected machines? Clearly there are LOTS of vulnerable NT servers still out there. Presumably these are being responded to just
like
Smurf amplifiers, and the problem is just that the admins are clueless or unreachable? So far the most prolific network probing us has belonged to 9NetAve, which was bought by Concentric shortly before they became XO.
I got so far about 205 unique IPs from the scans. If anyone is interested I can put them on a webpage. Or even put quickly a script with db in the back for other people to provide their list of IPs.
KevinHopefully the notification does some good.
-- Regards, Ulf. --------------------------------------------------------------------- Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204
Current thread:
- RE: Worm probes, (continued)
- RE: Worm probes Roeland Meyer (Sep 18)
- Re: Worm probes Jim Mercer (Sep 18)
- FW: Re: Worm probes Roeland Meyer (Sep 18)
- Re: Worm Probes Roeland Meyer (Sep 18)
- Re: Worm Probes Bill Becker (Sep 18)
- Re: Worm Probes Bill Larson (Sep 18)
- Re: Worm Probes Mark Kent (Sep 18)
- Re: Worm Probes Bill Becker (Sep 18)
- RE: Worm probes Roeland Meyer (Sep 18)
- Re: Worm probes Ulf Zimmermann (Sep 18)
- Re: Re: FW: Worm probes Frank Coluccio (Sep 18)
- RE: Worm probes Roeland Meyer (Sep 18)
- RE: Worm probes Smith, Rick (Sep 18)
- Re: Worm probes Ulf Zimmermann (Sep 18)