North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: Sobig.f surprise attack today
Jay Hennigan wrote:
On Fri, 22 Aug 2003, Andrew Kerr wrote:Its been posted here, and f-secure has it, but I wrote a quick script to keep an eye on the 20 servers and dump the output to a simple page: http://188.8.131.52/sobig.html (Updates about every 5 mins)You're probing the list of NTP servers the worm uses to get the date, not the list of hosts to which it "phones home".
A few people pointed that out. By the time this message hits the list, it should be corrected.