nanog mailing list archives
Re: Sobig.f surprise attack today
From: Jay Hennigan <jay () west net>
Date: Fri, 22 Aug 2003 12:40:35 -0700 (PDT)
On Fri, 22 Aug 2003, Andrew Kerr wrote:
Its been posted here, and f-secure has it, but I wrote a quick script to keep an eye on the 20 servers and dump the output to a simple page: http://207.195.54.37/sobig.html (Updates about every 5 mins)
You're probing the list of NTP servers the worm uses to get the date, not the list of hosts to which it "phones home". -- Jay Hennigan - CCIE #7880 - Network Administration - jay () west net WestNet: Connecting you to the planet. 805 884-6323 WB6RDV NetLojix Communications, Inc. - http://www.netlojix.com/
Current thread:
- Sobig.f surprise attack today Jim Dawson (Aug 22)
- RE: Sobig.f surprise attack today Todd Mitchell - lists (Aug 22)
- Re: Sobig.f surprise attack today Omachonu Ogali (Aug 22)
- RE: Sobig.f surprise attack today Randy Neals (ORION) (Aug 22)
- RE: Sobig.f surprise attack today Gary Attard (Aug 22)
- RE: Sobig.f surprise attack today Stephen J. Wilcox (Aug 22)
- Re: Sobig.f surprise attack today Andrew Kerr (Aug 22)
- Re: Sobig.f surprise attack today Jay Hennigan (Aug 22)
- Re: Sobig.f surprise attack today Andrew Kerr (Aug 22)
- Re: Sobig.f surprise attack today Omachonu Ogali (Aug 22)
- RE: Sobig.f surprise attack today Todd Mitchell - lists (Aug 22)
- Re: Sobig.f surprise attack today Petri Helenius (Aug 22)
- Re: Sobig.f surprise attack today Jay Hennigan (Aug 22)
- Message not available
- Re: Sobig.f surprise attack today Owen DeLong (Aug 22)
- Re: Sobig.f surprise attack today Doug Barton (Aug 22)
- Re: Sobig.f surprise attack today Owen DeLong (Aug 28)
- Re: Sobig.f surprise attack today Dan Hollis (Aug 28)
- Re: Sobig.f surprise attack today Mike Tancsa (Aug 28)
- Re: Sobig.f surprise attack today Petri Helenius (Aug 28)