RE: strange attacks - flood udp packets from 1030 to msql

From: Dan Perez (danperez@san.rr.com)
Date: 01/25/03

  • Next message: dtm@paypal.com: "Re: Paypal.com hosting IRC server, possible hack?" 
    From: "Dan Perez" <danperez@san.rr.com>
To: "'Uwe Dippel'" <udippel@yahoo.com>, <incidents@securityfocus.com>
Date: Sat, 25 Jan 2003 12:32:26 -0800

    Please refer to the preliminary analysis at ISC

    http://isc.incidents.org/analysis.html?id=180

    -----Original Message-----
    From: Uwe Dippel [mailto:udippel@yahoo.com]
    Sent: Saturday, January 25, 2003 3:52 AM
    To: incidents@securityfocus.com
    Subject: strange attacks - flood udp packets from 1030 to msql

    The subject says it.
    Strange behaviour and no clue here why.
    A server floods random (??) IP-addresses with udp-packets from iad1 to
    1434 (msql), overflowing the external router,yadayadayada. DoS, in
    short.
    Anyone seen this before ??

    Uwe

    __________________________________________________
    Do you Yahoo!?
    Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
    http://mailplus.yahoo.com

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com