Re: strange attacks - flood udp packets from 1030 to msql

On Sat, Jan 25, 2003 at 03:51:59AM -0800, Uwe Dippel wrote:
> The subject says it.

Yes, our colocation facility was severely crippled by this worm from about 8pm Friday, the 24th until about 2pm today (PST).

You can see here on the mrtg graphs the extent of the congestion it caused.

http://oak-mrtg.inreach.com/oak/colo/005/209.209.25.185.4.html

I could login to my machines there, but I couldn't run any commands whatsoever from them. A simple ps -fe would hang the session.

-- 
Eric Nelson		GPG-key: C4AB5707
http://www.megahosted.com/~en/

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com