[42577] in North American Network Operators' Group
Worm probes
daemon@ATHENA.MIT.EDU (sigma@pair.com)
Tue Sep 18 09:55:06 2001
Message-ID: <20010918135431.27315.qmail@smx.pair.com>
From: sigma@pair.com
To: nanog@merit.edu
Date: Tue, 18 Sep 2001 09:54:31 -0400 (EDT)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
Has anyone else been seeing a dramatic increase in /scripts/.. NT worm
probes this morning? We're seeing about 8000/second, starting around 9:15
Eastern time, to and from a wide variety of addresses.
Is CodeRed or one of its relatives scheduled to start sweeping again today?
We've never seen this level of traffic related to the NT worms. Even
though we don't run any NT at all, we still have to suffer :(
Kevin
