Home page logo
/

nanog logo nanog mailing list archives

Re: Worm probes
From: Ulf Zimmermann <ulf () Alameda net>
Date: Tue, 18 Sep 2001 11:31:45 -0700


On Tue, Sep 18, 2001 at 01:36:48PM -0400, sigma () pair com wrote:


Along those lines, weren't there some projects last time around to find and
clean up the affected machines?  Clearly there are LOTS of vulnerable NT
servers still out there.  Presumably these are being responded to just like
Smurf amplifiers, and the problem is just that the admins are clueless or
unreachable?

So far the most prolific network probing us has belonged to 9NetAve, which
was bought by Concentric shortly before they became XO.
 
I got so far about 205 unique IPs from the scans. If anyone is interested
I can put them on a webpage. Or even put quickly a script with db in
the back for other people to provide their list of IPs.


Kevin

Hopefully the notification does some good.




-- 
Regards, Ulf.

---------------------------------------------------------------------
Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault