Forum Home
Press F1
 
Thread ID: 29601 2003-01-26 00:01:00 MASSIVE DDOS ATTACKS ALL OVER U.S. Jim B (153) Press F1
Post ID Timestamp Content User
116587 2003-01-26 00:01:00 slashdot.org

Since about midnight EST almost every host on the internet has been receiving a 376 byte UDP payload on port ms-sql-m (1434) from a random infected server. Reports of some hosts receiving 10 per minute or more. internetpulse.net is reporting UUNet and Internap are being hit very hard. This is the cause of major connectivity problems being experienced worldwide. It is believed this worm leverages a vulnerability published in June 2002. Several core routers have taken to blocking port 1434 outright. If you run Microsoft SQL Server, make sure the public internet can't access it. If you manage a gateway, consider dropping UDP packets sent to port 1434." bani adds "This has effectively disabled 5 of the 13 root nameservers."
Jim B (153)
116588 2003-01-26 03:42:00 Sorry Jim B,

I didn't read your post before I started "Slow Internet"thread.

Cheers,Kiwitas,;-)
Kiwitas (514)
116589 2003-01-26 03:53:00 No Problem Kiwitas Jim B (153)
116590 2003-01-26 04:32:00 is this like code red or something?,

grtz sal.
tga
sal (67)
116591 2003-01-26 05:06:00 > is this like code red or something?,

Pretty much but it only affects unpatched MS SQL Server 2000 servers. I'm suprised how many unpatched servers there were (Apparently around 25,000).
segfault (655)
116592 2003-01-26 06:23:00 My ISP got affected. I had limited internet access for quite a while last night. -=JM=- (16)
116593 2003-01-26 06:38:00 For more on the Sapphire or Sql Slammer worm that is/was slowing the net look at -

www.nzherald.co.nz

When is someone going to start designing and releasing blackbirds on the net?
Robin S_ (86)
116594 2003-01-26 09:36:00 Yeah I had problems connecting to Army ops yesterday, was about to reinstall (about a 20 hour download as I have lost some of the installation files due to originally downloading it to my old pc) when I traced the problem to this server problem. Apparantly problems are expected for the next few days. Danger (287)
116595 2009-03-18 17:41:00 Don't you think that after 6 years they might have solved it. Note to Mods can we have old threads locked Please they do it on other forums so it can't be that hard to do gary67 (56)
116596 2009-03-18 19:26:00 Don't you think that after 6 years they might have solved it. Note to Mods can we have old threads locked Please they do it on other forums so it can't be that hard to do

Agree, one other NZ forum I visit locks all threads if they have had no new replies for 30 days.
CYaBro (73)
1 2