Customers squeezed as ISPs pull trigger on viruses

TalkBack 7 of 42:

Next »

« Previous

• Thread View
• Flat View

Quite simple

Bagle, MyDoom and Sober all scan ports 1025, 2745, 3127, 6129 and several other ports looking for a machine that has lax security (ie. no firewall, week passwords, uneducated user). They will scan these ports several times and then sometimes attack with a Sokets de Trois v1. Trojan horse on port 5000. Unless Grandma has a firewall in place, updated and working to alert her she will never know these viruses on other computers are port scanning her computer and looking for a way to infect. While they do require social engineering to trick the user to open the file and execute the attachment, those who computers are already infected are scanning the internet looking for other computers to infect. This is one way how Granny gets her computer to unwillingly become a spam zombie and she doesnt know it.

I recently reported several IP's in the 68 IP range that where doing exactly what I've just described above. ISP's are taking the correct actions and this should get home users off thier duffs and learn how to secure thier machines with firewall and AV programs.

Kudo's to the ISP's for doing the right thing!!

One problem...WHAT TOOK SO DAMN LONG?!?!?!

Posted by: DragonBRockin   Posted on: 03/17/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now