Blocking port udp/tcp 1433/1434

Gadi Evron ge at linuxbox.org
Wed May 11 18:30:25 UTC 2005


> f) slammers half life is incredibly long

Worms have a very long life on the Internet, we still see swen.. and we
still see (although interesting) niche worms that attacked just one
specific personal firewall. :/

> Does anybody have any idea of the rate of NEW slammer infections?

The net is an incredible maze, it still happens (or more to the point
RE-happens). But I believe that if you will look at the IP's (or at
least DHCP ranges) sending the packets, you will find some similarities.

	Gadi.



More information about the NANOG mailing list