Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Sobig.f surprise attack today

  • From: Jay Hennigan
  • Date: Fri Aug 22 15:44:27 2003

On Fri, 22 Aug 2003, Andrew Kerr wrote:

> Its been posted here, and f-secure has it, but I wrote a quick script to
> keep an eye on the 20 servers and dump the output to a simple page:
>
> http://207.195.54.37/sobig.html
>
> (Updates about every 5 mins)

You're probing the list of NTP servers the worm uses to get the date, not
the list of hosts to which it "phones home".

-- 
Jay Hennigan - CCIE #7880 - Network Administration - jay@west.net
WestNet:  Connecting you to the planet.  805 884-6323      WB6RDV
NetLojix Communications, Inc.  -  http://www.netlojix.com/




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.