[geeks] BlackIce vulnerable

[Mike Meredith]

On Sat, 20 Mar 2004 14:52:37 -0500, Kurt Huhn wrote:
> New worm going around that affects systems running BlackIce.
> http://isc.sans.org/diary.html
> 
> Take those systems off the net people.

Hmm ... 5,000 odd packets with source port 4000 blocked yesterday; 2.4
million odd packets blocked today so far. At least I got confirmation
that my latest syslog-ng build does work fine with log files > 2Gbytes.

Looks like somebody has woken up and started blocking it somewhere :-

    299  00
    334  01
    212  02
    236  03
  23596  04
 263325  05
 256273  06
 225100  07
 201641  08
 189595  09
 175539  10
 163969  11
 150572  12
 137610  13
 126541  14
 113367  15
  98675  16
  92976  17
  87669  18
  78206  19

(Second column is time in UTC)