[DShield] 3127/tcp by Doomjuice (Kaspersky) - MyDoom takeover?

Doug White doug at clickdoug.com
Tue Feb 10 13:51:35 GMT 2004


Multiple IPs - [31 sources] The probes have moved into second place, just below
port 137

Ahead of 1434, 445.

3127 has moved into 5th place now.  only one 3128 so far, from RR.COM which also
hit ports 3127, 1080 and 10090 at the same time

======================================
Stop spam on your domain, Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
Aspire to Inspire before you Retire or Expire!


----- Original Message ----- 
From: "Pete Cap" <peteoutside at yahoo.com>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Tuesday, February 10, 2004 5:47 AM
Subject: Re: [DShield] 3127/tcp by Doomjuice (Kaspersky) - MyDoom takeover?


: Multiple IPs or one block?
:
: Regards,
: Pete
:
: Doug White <doug at clickdoug.com> wrote:
: What I am seeing today is a tremendous upsurge in port 17300 probes, 100 times
: above normal.
:
: ======================================
: Stop spam on your domain, Anti-spam solutions
: http://www.clickdoug.com/mailfilter.cfm
: For hosting solutions http://www.clickdoug.com
: ======================================
: Aspire to Inspire before you Retire or Expire!
:
: _______________________________________________
: list mailing list
: list at dshield.org
: To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
:
: ---------------------------------
: Do you Yahoo!?
: Yahoo! Finance: Get your refund fast by filing online
: _______________________________________________
: list mailing list
: list at dshield.org
: To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
:
:




More information about the list mailing list