Hosting Provided By

Re: NIMDA - ceased ? -

From: James C. Slora Jr. <Jim.Slora(at)phra.com>
Date: Fri Dec 27 2002 - 13:36:51 EST

Neil Dickey wrote Friday, December 27, 2002 12:25 PM

I believe that Nimda and Code Red are usually dormant at the end of every month anyway. They'll be back in a few days.

But I agree that many Nimda-like probes are probably script kiddies. If you are talking about just the one particular hit that Tomo listed, most of my query sources have been script kiddies rather than Nimda.

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Fri Dec 27 18:19:08 2002

This message: [ Message body ]
Next message: H C: "RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second"
Previous message: Skip Carter: "Re: NIMDA - ceased ? -"
In reply to Neil Dickey: "Re: NIMDA - ceased ? -"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:55 EDT