New worm / port 1434?

Sat Jan 25 19:59:15 UTC 2003

I'm betting they are saying that Code Red was worse because anyone who had
e-mail could recieve a copy. Only a select number of IP Addresses out there
are going to be running MSSQL. Personally, I agree with you, this is much
worse the Code Red...

Thanks,

Adam Debus
Network Administrator, ReachONE Internet
adam at reachone.com

----- Original Message -----
From: "Jack Bates" <jbates at brightok.net>
To: "Eric Gauthier" <eric at roxanne.org>; <nanog at merit.edu>
Sent: Saturday, January 25, 2003 9:35 AM
Subject: Re: New worm / port 1434?

>
> From: "Eric Gauthier"
>
> > Woot!
> >
> > We made the front page of CNN.com:
> >
> > Electronic attack slows Internet
> > http://www.cnn.com/2003/TECH/internet/01/25/internet.attack/index.html
> >
> > Guess that USD10 goes to some unnamed reporter at CNN
> >
> And please tell me how CodeRed was worse? I'm sorry, this just created a
lot
> of Internet traffic hurting performance? That's a little underrated. But
> then again, it's a port that could be blocked and not cause severe damage.
> Block tcp/80 and people would through a fit.
>
> *mental note: Block port 80 anytime another port must be blocked just to
be
> sure.
>
> Jack Bates
> Network Engineer
> BrightNet Oklahoma
>
>