[66234] in North American Network Operators' Group
Re: UUNet contact for security spambot?
daemon@ATHENA.MIT.EDU (Christopher L. Morrow)
Mon Jan 5 11:57:33 2004
Date: Mon, 5 Jan 2004 16:54:05 +0000 (GMT)
From: "Christopher L. Morrow" <chris@UU.NET>
To: Jay Hennigan <jay@west.net>
Cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.58.0401050836350.825@ohtf.fo.jrfg.arg>
Errors-To: owner-nanog-outgoing@merit.edu
please email me your question :)
I didn't write the bot, but I know the people that did.
On Mon, 5 Jan 2004, Jay Hennigan wrote:
>
> Some well-intentioned person at UUNet, in an effort to rid the Internet
> of worms, viruses, and evildoers, has written a script that sends email
> in response to network scans. Repeatedly.
>
> Mail comes from "secmbox3@uu.net" with a return path of "eagleeye@uu.net".
>
> We're getting complaints for an origin IP that neither originates on nor
> passes through our network. I'm not sure why UUNet or their robot assumes
> that we can help with the problem.
>
> Replies to the scripted mail appear to go to Dave Null. If a human at
> UU.Net could contact me off-list about this, it would be appreciated.
>
> --
> Jay Hennigan - CCIE #7880 - Network Administration - jay@west.net
> WestNet: Connecting you to the planet. 805 884-6323 WB6RDV
> NetLojix Communications, Inc. - http://www.netlojix.com/
>
