[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-virus
Subject:    RE: Nimda reborn?
From:       "Robert Woods" <robert.woods () percepta-crm ! com>
Date:       2001-10-16 23:25:13
[Download RAW message or body]

William,
  Yes, in the last 10 days, I have seen the following on my gateways:

1.  http port scans
2.  ftp port scans
3.  Exchange Services port scans
4.  Printer Services port scans

  I would definitely have to define the activity of late as a re-assurgence.
Anyone else sharing similar findings on their gateways?

Rob



-----Original Message-----
From: William LeRoy [mailto:leroy@commvault.com]
Sent: Monday, October 15, 2001 8:37 AM
To: 'Clark, Steve'; 'FOCUS-VIRUS@securityfocus.com'
Subject: RE: Nimda reborn?


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Steve,

I agree, I have seen an increase in Nimda activity, and so far the ISP's
are doing nothing when I report it.

Bill LeRoy
leroy@commvault.com

- -----Original Message-----
From: Clark, Steve [mailto:Steve@clarksupport.com]
Sent: Saturday, October 13, 2001 5:08 PM
To: 'FOCUS-VIRUS@securityfocus.com'
Subject: RE: Nimda reborn?


Seeing a lot more traffic in the logs from my Netscreens. IP addresses still
show servers WIDE OPEN.

ISP's are doing NOTHING about it when reported.

Steve Clark
Clark Systems Support, LLC
AVIEN Charter Member
"Who's watching your network?"
www.clarksupport.com
	301-610-9584 voice
	240-465-0323 Efax

- -----Original Message-----
From: McCammon, Keith [mailto:Keith.McCammon@eadvancemed.com]
Sent: Saturday, October 13, 2001 8:34 AM
To: 'William Grossman'; Focus-Virus Mailing List
Subject: RE: Nimda reborn?

Yep.  I'm seeing about three to four times the number of hits that I've seen
in weeks past.  Looks like some of our fellow "qualified professionals" have
started added some fresh fuel to the fire.  Lamers...

Keith

- -----Original Message-----
From: William Grossman [mailto:wgrossman@dawsonmetal.com]
Sent: Friday, October 12, 2001 1:19 PM
To: Focus-Virus Mailing List
Subject: Nimda reborn?


Has anyone else noticed a resurgence in Nimda hits?  I've had more hits
so far today than I've had in the last week.

William B. Grossman
Network Administrator

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBO8rXape8b34hWPS5EQI71QCfTbC3wifRgThHF4+4S+6OP9rZVmgAn015
YyygBY/SBLq6+MkshSX9+Hfh
=lhVt
-----END PGP SIGNATURE-----

[prev in list] [next in list] [prev in thread] [next in thread]