Home page logo
/

nanog logo nanog mailing list archives

Re: Online DB of IPs for Nimda worm infected machines
From: Ulf Zimmermann <ulf () Alameda net>
Date: Tue, 18 Sep 2001 17:53:25 -0700


Version 3 online now.

You can enter into the text area an IP per line or if you want to
submit the logdate from your webserver logs, then you can enter
IP,date. Example:

10.10.10.10

or

10.10.10.10,18/Sep/2001:17:50:41 -0700

I also removed my entries and readded the ones by grabbing for

        grep -i /msadc/

This will add hosts several times, but as someone pointed out,
a dynamic IP can change and it could be a different host each
time.

I am going to add in a moment my log entries from my @Home
segment.

-- 
Regards, Ulf.

---------------------------------------------------------------------
Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]