[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-Disclosure] Sasser skips 10.x.x.x Why?

To: <full-disclosure@xxxxxxxxxxxxxxxx>
Subject: [Full-Disclosure] Sasser skips 10.x.x.x Why?
From: "Shawn Cox" <shawn.cox@xxxxxxxx>
Date: Mon, 3 May 2004 09:03:23 -0500

Why on earth would sasser skip 10.x.x.x?

I would venture to say there are a lot of unpatched machines hiding behind
corporate firewalls.

I guess it could be that the target machines are mostly internet based home
machines that have no 10.x.x.x ips to infect and would thus be wasted
infection attempts.

Blaster skipped 10.x.x.x too and was just wondering why...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Follow-Ups:
- Re: [Full-Disclosure] Sasser skips 10.x.x.x Why?
  - From: Thomas Springer
- Re: [Full-Disclosure] Sasser skips 10.x.x.x Why?
  - From: Matt Wagenknecht

References:
- [Full-Disclosure] New LSASS-based worm finally here (Sasser)
  - From: Ben Ryan
- [Full-Disclosure] Re: New LSASS-based worm finally here (Sasser)
  - From: Javier Fernandez-Sanguino

Prev by Date: Re: [Full-Disclosure] Agobot/Gaobot/Phatbot
Next by Date: Re: [Full-Disclosure] Sasser skips 10.x.x.x Why?
Previous by thread: [Full-Disclosure] Re: New LSASS-based worm finally here (Sasser)
Next by thread: Re: [Full-Disclosure] Sasser skips 10.x.x.x Why?
Index(es):
- Date
- Thread