[rescue] new worm?

[Koyote]

> ... I should have provided details myself once I figured it out, 
> but I've been a bit busy (non worm related stuff). Looks like we were 
> lucky as we didn't allow the attack through the firewall. Judging by 
> how quickly things have settled down, I'd guess that the tier-1 
> networks blocked this traffic.

even better, it appears the internap has blocked 1433/1434 UDP now.

this is via phone, so I don't have anything to point to yet, I'm waiting
for a forward.


 _______________________________________________
> rescue list - http://www.sunhelp.org/mailman/listinfo/rescue