Matth
03-05-2004, 21:09
http://isc.sans.org/index.php
Flash Update (May 3rd 09:30 AM): We did receive some initial reports about a significant rise in ICMP traffic, which may point to a new worm with Nachi style ICMP component
Seen it, a new ping-stormer definitely seems to be out there, in addition to the other worms.
Not seen significant NTL-source hits, but this thing looks like it hits a whole class A address block, and there's some pretty bad company in the 80.x.x.x range.
Maybe NTL's port blocking is now paying off, and at least some of the worms are being headed off at the pass.
Flash Update (May 3rd 09:30 AM): We did receive some initial reports about a significant rise in ICMP traffic, which may point to a new worm with Nachi style ICMP component
Seen it, a new ping-stormer definitely seems to be out there, in addition to the other worms.
Not seen significant NTL-source hits, but this thing looks like it hits a whole class A address block, and there's some pretty bad company in the 80.x.x.x range.
Maybe NTL's port blocking is now paying off, and at least some of the worms are being headed off at the pass.