full-disclosure - SoBig.F strange problem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <00e101c36698$3b6fa320$550ffea9@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: SoBig.F strange problem

Scott,

  >>> I think I'm getting copies from just a few people. 

Here are the folks that I've found with infected machines that have been
sending me Sobig.F today:

Businesses
----------

12.20.127.254 (Cardinal Health)
12.10.50.21 (Thomas Industries)
128.229.187.148 (Advanced Decision Systems, Booz, Allen, and Hamilton)
65.120.64.139 (SAIC)
194.236.49.39 (Pulsen Dataproduktion AB)
156.80.188.239 (Booz, Allen, and Hamilton)

Accounts at ISPs
----------------

68.194.8.34 (Optimum Online)
216.68.162.59 (Fuse Internet Access)
64.50.116.210 (XO Communications)
18.36.0.212 (MIT)
202.9.167.74 (DISHNET DSL, India)
4.5.208.81 (Genuity DSL)
81.152.225.100 (BT Net)

Richard