PDA

View Full Version : MASSIVE DDOS ATTACKS ALL OVER U.S.



Jim B
26-01-2003, 12:01 PM
http://slashdot.org/articles/03/01/25/1245206.shtml?tid=109

Since about midnight EST almost every host on the internet has been receiving a 376 byte UDP payload on port ms-sql-m (1434) from a random infected server. Reports of some hosts receiving 10 per minute or more. internetpulse.net is reporting UUNet and Internap are being hit very hard. This is the cause of major connectivity problems being experienced worldwide. It is believed this worm leverages a vulnerability published in June 2002. Several core routers have taken to blocking port 1434 outright. If you run Microsoft SQL Server, make sure the public internet can't access it. If you manage a gateway, consider dropping UDP packets sent to port 1434." bani adds "This has effectively disabled 5 of the 13 root nameservers."

Kiwitas
26-01-2003, 03:42 PM
Sorry Jim B,

I didn't read your post before I started "Slow Internet"thread.

Cheers,Kiwitas,;-)

Jim B
26-01-2003, 03:53 PM
No Problem Kiwitas

sal
26-01-2003, 04:32 PM
is this like code red or something?,

grtz sal.
tga

segfault
26-01-2003, 05:06 PM
> is this like code red or something?,

Pretty much but it only affects unpatched MS SQL Server 2000 servers. I'm suprised how many unpatched servers there were (Apparently around 25,000).

-=JM=-
26-01-2003, 06:23 PM
My ISP got affected. I had limited internet access for quite a while last night.

Robin S_
26-01-2003, 06:38 PM
For more on the Sapphire or Sql Slammer worm that is/was slowing the net look at -

http://www.nzherald.co.nz/storydisplay.cfm?storyID=3097900&thesection=technology&thesubsection=general

When is someone going to start designing and releasing blackbirds on the net?

Danger
26-01-2003, 09:36 PM
Yeah I had problems connecting to Army ops yesterday, was about to reinstall (about a 20 hour download as I have lost some of the installation files due to originally downloading it to my old pc) when I traced the problem to this server problem. Apparantly problems are expected for the next few days.

gary67
19-03-2009, 05:41 AM
Don't you think that after 6 years they might have solved it. Note to Mods can we have old threads locked Please they do it on other forums so it can't be that hard to do

CYaBro
19-03-2009, 07:26 AM
Don't you think that after 6 years they might have solved it. Note to Mods can we have old threads locked Please they do it on other forums so it can't be that hard to do

Agree, one other NZ forum I visit locks all threads if they have had no new replies for 30 days.

Myth
19-03-2009, 07:52 AM
Don't you think that after 6 years they might have solved it. Note to Mods can we have old threads locked Please they do it on other forums so it can't be that hard to do
One has to ask... why did you bring it back after 6 years then?

Seems that six years on, people have that much time on their hands they can go searching for old threads, then reply and moan to the mods in the same post :confused:

Jen
19-03-2009, 07:59 AM
Agree, one other NZ forum I visit locks all threads if they have had no new replies for 30 days.This forum unfortunately does not have that option by default - it requires a plugin.

I agree, it would be nice to have this option but I think 30 days is way too short. 6 months would be a better option.

I will raise this with the power-that-be, but don't hold your breath. :rolleyes:

Jen
19-03-2009, 08:00 AM
One has to ask... why did you bring it back after 6 years then? He didn't. I deleted the spam post that bumped this thread.

Myth
19-03-2009, 08:16 AM
He didn't. I deleted the spam post that bumped this thread.Ok. Apologies then for barking at the wrong tree :rolleyes:

Jen
19-03-2009, 05:58 PM
This forum unfortunately does not have that option by default - it requires a plugin.

I agree, it would be nice to have this option but I think 30 days is way too short. 6 months would be a better option.

I will raise this with the power-that-be, but don't hold your breath. :rolleyes:Ohh ... we may have some action on this very shortly - watch this space ... ;)

wainuitech
19-03-2009, 06:25 PM
watch this space OK ------------------- :stare:

Metla
19-03-2009, 06:43 PM
Ohh ... we may have some action on this very shortly - watch this space ... ;)

Surely they need to first investigate the need for a meeting to discuss the issue. Organise the meeting to discuss the issue, Hold the meeting to discuss the issue, .........Whoa, I have no idea what comes after the meeting,chicken sandwiches perhaps? The weekend?

Ninjabear
19-03-2009, 08:41 PM
I know geekzone locks thread after 30 days.Far too short.At least 3 months I say after that then it should be locked