Security Incidents mailing list archives
Re: W32.Badtrans.B@mm storming my mailservers...
From: Ryan Tucker <rtucker () netacc net>
Date: Mon, 26 Nov 2001 14:55:45 -0500
We're seeing a lot of it...Our possible-email-attack alarms have looked like this over the last week...
2001-11-20 4 2001-11-21 7 2001-11-22 4 2001-11-23 2 2001-11-24 1 2001-11-25 5 2001-11-26 11 (up to 14:30 EST) We started noticing this worm at 16:44 EST yesterday (11/25)...Fortunately, html-trap.procmail seems to work well for catching this. :-) -rt
On Monday, November 26, 2001, at 02:30 , Raistlin wrote:
I have personally received about 8 copies of this worm today, and mymailserver is busy with incoming and outgoing requests of the same kind.Is this a trend out there or it's just my problem ? Stefano "Raistlin" Zanero System Administrator Gioco.Net public PGP key block at http://gioco.net/pgpkeys ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
-- Ryan Tucker <rtucker () netacc net> Network Operations Manager, NetAccess, Inc. http://www.netacc.net/ • (585)419-8252 ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- W32.Badtrans.B@mm storming my mailservers... Raistlin (Nov 26)
- RE: W32.Badtrans.B@mm storming my mailservers... Tim M. Crawford (Nov 26)
- Re: W32.Badtrans.B@mm storming my mailservers... Ryan Tucker (Nov 26)