Full Disclosure mailing list archives

Let the Sasser worm begin

From: "Edward W. Ray" <support () mmicman com>
Date: Sat, 1 May 2004 23:39:03 -0700

 My firewall logs are filling up these days.  A cocktail of port
135,445,1025 connection attempts, with ports 80 and 1027 thrown in
occasionally for good measure.  Mostly 24.199.0.0/16 addresses for me as
this is my subnet.  Reminds me of Nimda.  Glad I am switching ISPs soon, as
the home cable modem users here in the US should reach critical mass
infection soon.

Edward W. Ray

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

Re: viruses being sent to list cheekypeople (May 01)
- <Possible follow-ups>
- Re: viruses being sent to list Mike Barushok (May 01)
  - Re: viruses being sent to list Etaoin Shrdlu (May 01)
    - Innocent newbie question... jayesh (May 02)
    - Re: Innocent newbie question... Bill Weiss (May 02)
    - Re: Innocent newbie question... Lee (May 02)
    - Re: Innocent newbie question... Gary Flynn (May 02)
    - Let the Sasser worm begin Edward W. Ray (May 02)