[plug] Is there *another* Windows worm around?

Leon Brooks leon at brooks.fdns.net
Tue Jan 28 12:27:38 WST 2003


On Tuesday 28 January 2003 12:14 pm, Leon Brooks wrote:
> Some of my customer sites are being beaten to a pulp by inbound TCP
> connections to random addresses at TCP port 80, at about triple the rate of
> the current MS-SQL (slammer/sapphire) storm, and a steady background of
> inbound connections to UDP port 137 at about half the MS-SQL rate.

Also noticing a few random IPSec connection attempts. Amazing how much junk a 
Class C collects in a very short time.

Cheers; Leon



More information about the plug mailing list