mailing list archives
Update: BlackWorm infected IP's reporting
From: Gadi Evron <ge () linuxbox org>
Date: Wed, 25 Jan 2006 15:07:55 +0200
Gadi Evron wrote:
In the next day or so some of us will cooperate to bring to the
attention of all effected AS's information about infected users in their
This will be coordinated with several groups and organizations. Please
expect these emails, thanks.
It is possible later reports will be received as well, but if you have
infected users, you should get the emails within a few hours.
These email messages will include a web link to the SANS ISC where you
would be able to securely reach IP addresses relevant to you. It is
possible (although we try and avoid it) that you will get notifications
twice, from different email addresses.
If that happens, we can only apologize. I am sure you understand that
despite coordination, some confusion happens when so much is done by so
many people in so short a time.
If you get no email message for whatever reason, and wish to *make sure*
this was not because of some fluke and your net-space really is clean,
feel free to ping me back in a day or so (off-list).