Home page logo
/

nanog logo nanog mailing list archives

RE: Worm probes
From: "Smith, Rick" <rsmith () atsworld com>
Date: Tue, 18 Sep 2001 15:35:46 -0400



I've seen 2,614 unique addresses.  I'd be willing to do the same.  Or
contribute to the effort.

-----Original Message-----
From: Ulf Zimmermann [mailto:ulf () Alameda net]
Sent: Tuesday, September 18, 2001 2:32 PM
To: sigma () pair com
Cc: nanog () merit edu
Subject: Re: Worm probes



On Tue, Sep 18, 2001 at 01:36:48PM -0400, sigma () pair com wrote:


Along those lines, weren't there some projects last time around to find
and
clean up the affected machines?  Clearly there are LOTS of vulnerable NT
servers still out there.  Presumably these are being responded to just
like
Smurf amplifiers, and the problem is just that the admins are clueless or
unreachable?

So far the most prolific network probing us has belonged to 9NetAve, which
was bought by Concentric shortly before they became XO.
 
I got so far about 205 unique IPs from the scans. If anyone is interested
I can put them on a webpage. Or even put quickly a script with db in
the back for other people to provide their list of IPs.


Kevin

Hopefully the notification does some good.




-- 
Regards, Ulf.

---------------------------------------------------------------------
Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault