[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: suspicious smbd connections



On Wed, Dec 24, 2003 at 03:33:54PM +0100, outsider wrote:
> But I have a dynamic IP. Every time I boot my system I get another 
> IP-address.

The worms are targetting random IP addresses.  The IP address you have
tomorrow is just as likely to get scanned as the one you have today.
(Technically not *just* as likely, due to the nature of pseudo-random
number generators and the fact that all the Windows worms have bad PRNG
implementations, but you get the idea.)

noah

Attachment: pgpfh3l6UfpLg.pgp
Description: PGP signature


Reply to: