Increased activity on UDP/1434

From: Dmitri Smirnov (Dmitri.Smirnov@fusepoint.com)
Date: 01/25/03

  • Next message: Pauling: "Re: New spam-probing wave?" 
    Date: Fri, 24 Jan 2003 23:05:03 -0800
From: "Dmitri Smirnov" <Dmitri.Smirnov@fusepoint.com>
To: <incidents@securityfocus.com>

    Having a big number of connections on UDP/1434 from a random IPs in
    Internet on
    a different networks. One hour ago (22:00 PST) one server in colo space
    started to initiate
    a hundreds of connection per second to diff. hosts on Internet to port
    UDP/1434 (isolated).
    New worms? DDoS? Is anyone experience the same?

    Dmitri Smirnov, SSCP
    Security Team
    Fusepoint Managed Services Inc.
    Suite 2323, Three Bentall Centre
    595 Burrard Street
    P.O. Box 49336
    Vancouver B.C. V7X 1L4
    Phone: (604) 687-7757
    Fax: (604) 687-7761
    Email: Dmitri.Smirnov@fusepoint.com

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com

    Relevant Pages

    • Re: SBS 2003 IIS BASED SERVICES FAIL INTERMITTENTLY
      ... If I read your post correctly, you have a switch where the SBS ... Run DHCP server on your SBS, and set all client machine nics to dynamic. ... Once you have your nics configured, run the Connect to the Internet wizard, ... QUESTION1 - what is REFUSING CONNECTIONS? ...
      (microsoft.public.windows.server.sbs)
    • RE: Remote access problem
      ... CEICW setting RWW is OK. ... I clicked "Connect to server desktops" and got the screen with all the ... Remote connections ... > Internet Connection wizard' to configure the server networking settings? ...
      (microsoft.public.windows.server.sbs)
    • Re: Connection Sharing on demand
      ... user has to authenticate for each time they want an Internet service, ... That can be done as a firewall application with lots ... you'd have the user connect to a server ... mentioned blocking inbound connections - that's trivial to do with the ...
      (comp.os.linux.networking)
    • Re: windows 2003 server routing and remote access setup
      ... or by computer) level permissions for using the outbound connections only ... connected to the internet. ... ...and permit VPN for external users that you want to access your LAN. ... Your server needs to have access to both ...
      (microsoft.public.windows.server.general)
    • RE: Changing from DCHP to static IP address
      ... You configure your Internet connections ... Best of Luck with your server. ... On your OUTSIDE (Internet) adapter, you should have the following configured: ... You also need to add the ISP's DNS addresses ...
      (microsoft.public.windows.server.sbs)