Home page logo
/

nanog logo nanog mailing list archives

Re: Sobig.f surprise attack today
From: Andrew Kerr <andrew_kerr () iamnos ca>
Date: Fri, 22 Aug 2003 13:43:23 -0600


Jay Hennigan wrote:
On Fri, 22 Aug 2003, Andrew Kerr wrote:


Its been posted here, and f-secure has it, but I wrote a quick script to
keep an eye on the 20 servers and dump the output to a simple page:

http://207.195.54.37/sobig.html

(Updates about every 5 mins)


You're probing the list of NTP servers the worm uses to get the date, not
the list of hosts to which it "phones home".



A few people pointed that out. By the time this message hits the list, it should be corrected.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault