[plug] Is there *another* Windows worm around?

Leon Brooks leon at brooks.fdns.net
Tue Jan 28 12:14:22 WST 2003


Some of my customer sites are being beaten to a pulp by inbound TCP 
connections to random addresses at TCP port 80, at about triple the rate of 
the current MS-SQL (slammer/sapphire) storm, and a steady background of 
inbound connections to UDP port 137 at about half the MS-SQL rate.

Has anyone else had this? Have there been any recent Windows web worm 
announcements?

Cheers; Leon



More information about the plug mailing list