Article 16903 of comp.unix.questions:
Path: doug.cae.wisc.edu!umn.edu!spool.mu.edu!olivea!uunet!s850.mwc.edu!ernie
From: ernie@PROBLEM_WITH_INEWS_GATEWAY_FILE (ackermann.cpsc)
Newsgroups: comp.unix.questions
Subject: Re: Internet Worm
Message-ID: <1c2o06INN64d@s850.mwc.edu>
Date: 21 Oct 92 04:57:42 GMT
References: <1992Oct20.144518.23308@cs.hw.ac.uk>
Organization: Mary Washington College, CPSC Dept.
Lines: 30
NNTP-Posting-Host: s850.mwc.edu
X-Newsreader: TIN [version 1.1 PL6]


Stewart T Fleming (sfleming@cs.hw.ac.uk) wrote:
> 
> Does anyone have a reference to any study or analysis of
> the infamous Internet worm of a couple of years back that
> spread through the mail system ?
> 
> Anything is useful, but a journal or conference proceedings
> (Usenix ?) or other publicly available source is preferred.
There are many sources available on the Internet. One site is
nic.sura.net. Look in the directory /pub/security.
Here are some sites (reported by archie) with uk addresses.

Host unix.hensa.ac.uk

    Location: /pub/uunet/doc
      DIRECTORY drwxr-xr-x        512  Sep 30 04:35  security
    Location: /pub/uunet/pub
      DIRECTORY drwxr-xr-x        512  Sep 30 04:35  security

Host uts.mcc.ac.uk

    Location: /gopher-data/utsinfo/utsguide/files
           FILE -rw-------       2466  Aug 10 14:58  security


ALSO:

ftp nic.funet.fi
/pub/doc    /phrac?

for a while:
ftp.eff.org /pub/cud

ftp.uunet.edu
/docs/literary/obi/Phracks