[TriLUG] OT: Finding/Notifying People with Worm-infested PC's

[Turnpike Man]

Just FYI, back before I converted to a linux server (over 2 years ago) I used
to run my website at home on IIS... at any rate, I caught code red and RR
shutdown my cable modem, called my home phone and left me a message notifying
me of such.  I cured my problem, called them back, verified with them I was
cured and they turned my connection back on.  I would like to think they are
still this vigilant, but with linux, I don't have these problems anymore!  :)

David M.

--- Jaimie Livingston <jaimie at onebutterfly.com> wrote:
> > On Tue, 2004-04-20 at 16:04, Jaimie Livingston wrote:
> > 
> > > I have a small web-server that I run at home for personal and development
> > > use, and I've been tagged by a few Worm-infested Windoze boxes, probably
> > > some home PCs that the users have running wide open on the Internet. I
> have
> > > the IP addresses, some from RR, and would like to find these people and
> let
> > > them know that they are doing the world a disservice by leaving an
> infected
> > > Windows box up and running, and maybe give them some pointers on how to
> > > prevent such a thing from happening. 
> > > 
> > 
> > All you can really do is forward the e-mail (with full headers) to the
> > appropriate abuse/postmaster addresses, which would be for example
> > abuse at nc.rr.com for RoadRunner customers.  Not sure it will 
> > do that much good but it's worth a try.  I don't really worry about it
> myself as
> > SpamAssassin seems to catch most of the worm e-mail that I get.
> > 
> > --Jeremy
> 
> Except is not e-mail that's bugging me, it's the way Nimbda, CodeRed, and the
> WebDAV worms
> are cluttering my Apache logs. It's not a huge concern, but it is a pet
> peeve. Do you
> think the sending them excerpts from the logs will be of use? 
> 
> Jaimie
> 
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ  : http://trilug.org/faq/
> TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
> TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc



	
		
__________________________________
Do you Yahoo!?
Yahoo! Photos: High-quality 4x6 digital prints for 25¢
http://photos.yahoo.com/ph/print_splash