Home page logo

nanog logo nanog mailing list archives

RE: Sobig.f surprise attack today
From: "Dr. Jeffrey Race" <jrace () attglobal net>
Date: Fri, 22 Aug 2003 17:52:03 +0700

On Fri, 22 Aug 2003 14:13:27 -0400, Todd Mitchell - lists wrote:
See the following message sent out by X-Force a few hours ago.>Todd
Computers infected with the Sobig.F worm are programmed
to automatically download an executable of unknown function
from a hard-coded list of servers at 19:00 UTC (3:00pm EDT)
X-Force is recommending wholesale outbound filtering of 
the following IP addresses:

Roadrunner              IIII
Comcast                 II
Sprint                  I
Dacom                   I
Earthlink               I
Le Groupe Videotron     II
Bell Canada             IIIII 
Net 66                  II
Charter                 I
ATT Worldnet            II

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]