RE: strange attacks - flood udp packets from 1030 to msql

From: Dan Perez (danperezat_private)
Date: Sat Jan 25 2003 - 12:32:26 PST

Next message: dtmat_private: "Re: Paypal.com hosting IRC server, possible hack?"

Previous message: Tina Bird: "internet status"
In reply to: Uwe Dippel: "strange attacks - flood udp packets from 1030 to msql"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Please refer to the preliminary analysis at ISC

http://isc.incidents.org/analysis.html?id=180

-----Original Message-----
From: Uwe Dippel [mailto:udippelat_private]
Sent: Saturday, January 25, 2003 3:52 AM
To: incidentsat_private
Subject: strange attacks - flood udp packets from 1030 to msql

The subject says it.
Strange behaviour and no clue here why.
A server floods random (??) IP-addresses with udp-packets from iad1 to
1434 (msql), overflowing the external router,yadayadayada. DoS, in
short.
Anyone seen this before ??

Uwe

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: dtmat_private: "Re: Paypal.com hosting IRC server, possible hack?"
Previous message: Tina Bird: "internet status"
In reply to: Uwe Dippel: "strange attacks - flood udp packets from 1030 to msql"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Jan 26 2003 - 20:28:00 PST