Re: Publishing Nimda Logs

From: Mally Mclane (mallyat_private)
Date: Wed May 08 2002 - 08:47:05 PDT

  • Next message: Richard.Smithat_private: "Re: Publishing Nimda Logs"

    >>   I'm curious to see how other feel about this. Is it:
    >> 
    >>   1) Recommended. Go for it and publish the IP's and let the "Gods of IP"
    >>      sort out the damage.
    >>   2) A Bad Thing. These are innocent victims, and you will just have them
    >>      be attacked by evil people.
    >>   3) Boring. Who cares? It's Nimda, and an everyday part of life. Deal
    >>      with it and ignore the logs.
    > 
    > 
    > If you have Apache et.al. No3 is the best option. ;-)
    > 
    > Everything else, like building lists of vulnerable IPs can either be
    > considered a "hobby" or will help script-kiddies and IRC-weenies build
    > an army of zombies in the medium term.
    > 
    > ARIN (+RIPE + APNIC + ...) information isn't very reliable anyway.
    > There have been several threads about this.
    > And if you've complained to SPAM before, you may already know this.
    
    hrm, I have to disagree here.
    
    9 times out of 10, if you want contact information, the RIPEdb will supply
    *correct* contact information. And opsat_private will *always* try to help
    you out if you don't get correct contact information.
    
    
    Cheers,
    
    
    Mally Mclane
    RIPE NCC Operations
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed May 08 2002 - 11:23:06 PDT