Home page logo
/

nanog logo nanog mailing list archives

Re: Sobig.f surprise attack today
From: Jay Hennigan <jay () west net>
Date: Fri, 22 Aug 2003 12:40:35 -0700 (PDT)


On Fri, 22 Aug 2003, Andrew Kerr wrote:

Its been posted here, and f-secure has it, but I wrote a quick script to
keep an eye on the 20 servers and dump the output to a simple page:

http://207.195.54.37/sobig.html

(Updates about every 5 mins)

You're probing the list of NTP servers the worm uses to get the date, not
the list of hosts to which it "phones home".

-- 
Jay Hennigan - CCIE #7880 - Network Administration - jay () west net
WestNet:  Connecting you to the planet.  805 884-6323      WB6RDV
NetLojix Communications, Inc.  -  http://www.netlojix.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]