RE: * informant * Zone Alarm activity

[Bob Howell]

My Norton Firewall has been logging several thousand port scan events per day now for the past several days.  My cable company (@home.com) said that these are from the Code Red worm.  Code Red is cycling through IP address numbers looking to infect any new Windows 2000 systems running IIS.  They said there are so many Windows 2000 systems already infected with the Code Red worm (i.e. supposedly several hundred thousand systems), and since all of these systems are actively port scanning, that is why we are receiving a constant stream of port scans.  Code Red does this on days 1 to 19 of the month.  So, this should supposedly stop when we reach the 20th of the month.  Or, it could also stop if all infected Windows 2000 users would wake up and install the patch from Microsoft.  As I sit here looking at my cable modem, the Data light is constantly flashing as I get hit with hundreds of port scans per hour from infected Windows 2000 systems.  There is nothing one can do except to clear out one's firewall event log every several hours and wait for the infected systems to stop their port scanning.  For more infromation, read the FAQ at:      http://www.incidents.org/ Bob, Pensacola, FL   ---- * Message Board: http://www.theMezz.com/tech/ post: [EMAIL PROTECTED] url: http://theMezz.com subscribe: [EMAIL PROTECTED] digest: [EMAIL PROTECTED] notDigest: [EMAIL PROTECTED] ==^================================================================ EASY UNSUBSCRIBE click here: http://topica.com/u/?b1dhsJ.b1LEke Or send an email To: [EMAIL PROTECTED] This email was sent to: archive@jab.org T O P I C A -- Register now to manage your mail! http://www.topica.com/partner/tag02/register ==^================================================================