Re: big DDoS worm

[James P. Salsman]

> Those of you with IIS servers might want to keep a close eye on 
> them and their traffic to 198.137.240.92...

Sorry, the worm is attacking port 80 of 198.137.240.91, not .92 -- 
the target address apparently had a short enough time-to-live in 
its DNS cache settings, and they swaped the address over.

  http://www.eeye.com/html/Research/Advisories/AL20010717.html

Apparently this is not causing too much of a dent:

  http://average.miq.net/

Cheers,
James