[rescue] new worm?

Koyote koyote at koyote.cx
Sat Jan 25 12:03:26 CST 2003

> ... I should have provided details myself once I figured it out, 
> but I've been a bit busy (non worm related stuff). Looks like we were 
> lucky as we didn't allow the attack through the firewall. Judging by 
> how quickly things have settled down, I'd guess that the tier-1 
> networks blocked this traffic.

even better, it appears the internap has blocked 1433/1434 UDP now.

this is via phone, so I don't have anything to point to yet, I'm waiting
for a forward.

> rescue list - http://www.sunhelp.org/mailman/listinfo/rescue

More information about the rescue mailing list