[42687] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Online DB of IPs for Nimda worm infected machines

daemon@ATHENA.MIT.EDU (Ulf Zimmermann)
Tue Sep 18 20:54:00 2001

Date: Tue, 18 Sep 2001 17:53:25 -0700
From: Ulf Zimmermann <ulf@Alameda.net>
To: Ulf Zimmermann <ulf@Alameda.net>
Cc: nanog@nanog.org
Message-ID: <20010918175325.S2286@seven.alameda.net>
Reply-To: ulf@Alameda.net
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20010918170320.Q2286@seven.alameda.net>; from ulf@Alameda.net on Tue, Sep 18, 2001 at 05:03:20PM -0700
Errors-To: owner-nanog-outgoing@merit.edu


Version 3 online now.

You can enter into the text area an IP per line or if you want to
submit the logdate from your webserver logs, then you can enter
IP,date. Example:

10.10.10.10

or

10.10.10.10,18/Sep/2001:17:50:41 -0700

I also removed my entries and readded the ones by grabbing for

	grep -i /msadc/

This will add hosts several times, but as someone pointed out,
a dynamic IP can change and it could be a different host each
time.

I am going to add in a moment my log entries from my @Home
segment.

-- 
Regards, Ulf.

---------------------------------------------------------------------
Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204

home help back first fref pref prev next nref lref last post