> These two addresses are probing my webservers to attempt to exploit a  Microsoft
> vulnerability, looking for root.exe or cmd.exe. Whoever owns them should pull the
> plug and clean them up:
>
> 35.8.224.89   bard.cal.msu.edu
> 35.8.195.155   han-lab4.for.msu.edu

Gene,

Since there's not a high likelihood that the sysadmins for these systems will
be following MSUNAG, it would be best to send things like this to [log in to unmask],
unless you want to track down the sysadmins or netadmins yourself.

Doug


Doug Nelson                     [log in to unmask]
Network Manager                 Ph: (517) 353-2980
Computer Laboratory
Michigan State University