NIMDA - ceased ? -

From: Tomo (tomo@c-wind.com)
Date: 12/25/02

  • Next message: alfaentomega: "RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second"
    Date: Thu, 26 Dec 2002 02:00:00 +0900 (JST)
    To: incidents@securityfocus.com
    From: Tomo <tomo@c-wind.com>
    
    

    Hi, all.

    Is NIMDA ...(GET /scripts/..%252f../winnt/system32 ...something)
    ceased ?
    04:54, Dec. 23 UTC is the last access of them, around here.

    Any comments ?

    --- Tomo

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com



    Relevant Pages

    • RE: Strange Message
      ... > the NetBIOS Auditing Tool to enumerate all of your logon accounts and do ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)
    • RE: DOS ATTACK
      ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)
    • Re: SNMP Weirdness
      ... |PenTeleData/Prolog Internet Services | Network Security Engineer| ... This list is provided by the SecurityFocus ARIS analyzer service. ... and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)
    • RE: PDL anti-spam blacklist
      ... My personal IP range is blacklisted by these guys for some reason. ... This list is provided by the SecurityFocus ARIS analyzer service. ... and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)
    • Re: Voluminous SSHd scanning; possible worm activity?
      ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)