Re: Publishing Nimda Logs

[Mally Mclane <mally () ripe net>]

> >   I'm curious to see how other feel about this. Is it:
> >
> >   1) Recommended. Go for it and publish the IP's and let the "Gods of IP"
> >      sort out the damage.
> >   2) A Bad Thing. These are innocent victims, and you will just have them
> >      be attacked by evil people.
> >   3) Boring. Who cares? It's Nimda, and an everyday part of life. Deal
> >      with it and ignore the logs.
>
>
> If you have Apache et.al. No3 is the best option. ;-)
>
> Everything else, like building lists of vulnerable IPs can either be
> considered a "hobby" or will help script-kiddies and IRC-weenies build
> an army of zombies in the medium term.
>
> ARIN (+RIPE + APNIC + ...) information isn't very reliable anyway.
> There have been several threads about this.
> And if you've complained to SPAM before, you may already know this.

hrm, I have to disagree here.

9 times out of 10, if you want contact information, the RIPEdb will supply
*correct* contact information. And ops () ripe net will *always* try to help
you out if you don't get correct contact information.


Cheers,


Mally Mclane
RIPE NCC Operations


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com