[Dshield] nimda-like scanning?

Kelly Martin kellym at fb00.fb.org
Tue Mar 26 22:39:06 GMT 2002


This wasn't just your normal scattershot Nimda scanning, though.  This was a
sweep, straight across the network block.  Nimda is a random propagator;
this clearly was not random.

Kelly

> -----Original Message-----
> From:	Jim Tagart [SMTP:Jim.Tagart at bellcold.com]
> Sent:	Tuesday, March 26, 2002 4:04 PM
> To:	'list at dshield.org'
> Subject:	RE: [Dshield] nimda-like scanning?
> 
> I just ran a summary report and I'm seeing more port 80 scanning than
> normal
> 
> 




More information about the list mailing list