Security Incidents mailing list archives

Re: BIND worm.

From: "Booth, David CWT-MSP" <dbooth () CARLSON COM>
Date: Fri, 23 Mar 2001 16:02:39 -0600

Multiple scans of my home firewall since Monday. Full sweeps from the
following IPs

210.196.116.178 (x2)
24.7.241.106 (x3)
133.21.227.218
133.91.122.114
207.67.41.129 (x2)
211.5.104.138

From: Scott A. McIntyre [mailto:scott () XS4ALL NL]

I'm wondering how many others have seen sign of what appears to be a
BIND based worm attack that's been passing through here lately.

Current thread:

BIND worm. Scott A. McIntyre (Mar 22)
- Re: BIND worm. Neil Davey (Mar 23)
- Re: BIND worm. Andreas Östling (Mar 23)
  - Re: BIND worm. Carl A. Adams (Mar 23)
- <Possible follow-ups>
- Re: BIND worm. Booth, David CWT-MSP (Mar 23)