[55044] in North American Network Operators' Group
Re: New worm / port 1434?
daemon@ATHENA.MIT.EDU (Pete Ashdown)
Sat Jan 25 03:09:48 2003
Date: Sat, 25 Jan 2003 00:03:06 -0700
To: Avleen Vig <lists-nanog@silverwraith.com>
Cc: nanog@nanog.org
In-Reply-To: <20030125063229.GD58624@silverwraith.com>
From: Pete Ashdown <pashdown@xmission.com>
Errors-To: owner-nanog-outgoing@merit.edu
* Avleen Vig (lists-nanog@silverwraith.com) [030124 23:50] writeth:
>
>It seems we have a new worm hitting Microsoft SQL server servers on port
>1434.
Affirmative. Be sure to block 1434 UDP on both the inbound and the
outbound. Infected servers are VERY NOISY.