nanog mailing list archives

Re: Blocking port udp/tcp 1433/1434


From: Gadi Evron <ge () linuxbox org>
Date: Wed, 11 May 2005 22:30:25 +0400


f) slammers half life is incredibly long

Worms have a very long life on the Internet, we still see swen.. and we
still see (although interesting) niche worms that attacked just one
specific personal firewall. :/

Does anybody have any idea of the rate of NEW slammer infections?

The net is an incredible maze, it still happens (or more to the point
RE-happens). But I believe that if you will look at the IP's (or at
least DHCP ranges) sending the packets, you will find some similarities.

        Gadi.


Current thread: