Matt Wright FormMail Attacks

From: Dmitri Smirnov (Dmitri.Smirnovat_private)
Date: Sun Jan 13 2002 - 09:56:55 PST

  • Next message: Dan Hawrylkiw: "RE: New DNS connection with SYN ACK"

    Morning,
     
    just found "Matt Wright FormMail Attacks" as number 5 in 'Top Five' on
    aris.securityfocus.com. 
    I've sent dozens of alerts to ISPs about formmail.pl incidents but still
    having the probes from the same subnets (addresses) for few months already.
    Looks like people are not serious about this probe. Is anybody know why
    number of formmail.pl attacks is growing? May be it is a part of SPAM
    toolkit or some very popular tool?
    
    Dmitri Smirnov, SSCP
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Jan 14 2002 - 08:33:47 PST