ScoobyNet.com - Subaru Enthusiast Forum

ScoobyNet.com - Subaru Enthusiast Forum (https://www.scoobynet.com/)
-   Computer & Technology Related (https://www.scoobynet.com/computer-and-technology-related-34/)
-   -   Big Trouble on the Net Today (https://www.scoobynet.com/computer-and-technology-related-34/171025-big-trouble-on-the-net-today.html)

P1Fanatic 25 January 2003 12:22 PM

If youve noticed the Net being slow today it looks like yet another worm has been released causing chaos on internet links worldwide. Looks like its something to do with SQL on Port 1434.

No reports on the register etc as yet but believe me this is big!

Simon.

P1Fanatic 25 January 2003 12:31 PM

It looks like everyone is suffering from a Distributed Denial of
Service attack. It seems to be related to MS SQL servers that suddenly start sending loads of UDP traffic to random IP addressess on port 1434. This keeps on increasing, eventually maxing out links.

Simon.

super_si 25 January 2003 12:34 PM

Culprit :p

P1Fanatic 25 January 2003 12:47 PM

This makes code red look like a piss in the park. So I wouldnt be posting on a public BBS that you were involved :D

pslewis 25 January 2003 12:53 PM

I havent noticed any difference?? its faster than yesterday!! So I say - release the worm!! :D

Pete

P1Fanatic 25 January 2003 01:02 PM

Thats because by the time old farts like you get up from your slumber, its impact has been reduced :D

JackClark 25 January 2003 01:05 PM

http://vil.nai.com/vil/content/v_99992.htm

Saturday!!! Working on notification now.


P1Fanatic 25 January 2003 02:06 PM

Good link Jack!

RichB 25 January 2003 02:26 PM

Our Mac servers seem to be running fine :)
...but only cos all the SQL servers are off :(

Oh what fun it is to work in an ISP! *yawn*

P1Fanatic 25 January 2003 02:59 PM

We have loads of customers shutting their routers off due to the problems its causing them. Doesnt seem thay many customers are aware as yet. Im off for 5 days on monday so Ill miss the aftermath - ah joy!

stevem2k 25 January 2003 03:14 PM

One of our rotating banner providers has been down since 05:30 this morning ~ had to come into the office to put in some workarounds .. grrrrrr



Steve

Houlbt 25 January 2003 05:34 PM

Where do you work P1Fan...

We got totally fcuked today, costs a lot of cash in my game.

But me not being IT I just get to sit here looking stoopid whilst IT runs round pulling wires out of stuff

oh well....at least someone left a copy of evo lying around

P1Fanatic 25 January 2003 05:39 PM

I work for WorldCom mate. We knew about it just after midnight. Didnt impact our network that much as we got filters up to reduce traffic.

Simon.

Houlbt 25 January 2003 05:59 PM

Dunno.... but it is causing real trouble here, think we have a load of people from Siemens here sorting stuff.

Apparently BT lost a lot of systems... but I don't really know what I am talking about

Houlbt 25 January 2003 06:00 PM

UDP broadcast....ehhhh! what is that all about, me dunno

Gordon Brown 25 January 2003 06:28 PM

.

[Edited by Gordon Brown - 25/01/2003 18:29:41]

P1Fanatic 25 January 2003 07:13 PM

Heres another good link:

http://www.cert.org/advisories/CA-2003-04.html

Simon.

mega_stream 25 January 2003 07:17 PM

Have UUNET sorted that DNS problem yet?

What happened?


P1Fanatic 25 January 2003 07:39 PM

Its looking ok at the moment. I cant say exactly what happened as its more than my jobs worth posting that sort of stuff on a public bbs. If you look on the register it should give you the lowdown.

Simon.

[Edited by P1Fanatic - 25/01/2003 19:40:17]

P1Fanatic 25 January 2003 08:58 PM

Has made it to the Beeb:

http://news.bbc.co.uk/1/hi/technology/2693925.stm

super_si 25 January 2003 10:25 PM

Nestle feel foul to it aswell.

Old man told us.

Si

Houlbt 25 January 2003 10:29 PM

And Barclaycard, Commerzbank, Citibank, EdF, London Electricity, Transco.....they're just a few! Feck and they are only some of the 24/7 places that have weekend people to pick up on it.

Monday will be chaos in London.... no central line and all the computers hacked.

:(

Puff The Magic Wagon! 25 January 2003 10:32 PM



This threat has a special Risk Assessment - it is "High" only for unpatched systems (only affects SQL servers not running SP3):

Phew :eek:

After the week I've just had & now being on holiday, I'm sure as hell glad I've got SP3 running - that & lots of other protection...

Phew...

Houlbt 25 January 2003 11:41 PM

We were supposed to be patched though.... Que???? We spend fecking loads (I mean really lots) on IT, what a pi55 take!

Dunno...think there were some computers running SQL analytics type jobs (I'm no IT honcho in case you couldn't tell) and they got it in the data they were downloading (weather data i think???)

[Flame Suit Donned] I find it fascinating though... you know in the same way you can find those master criminal roberies...even though you cannot condone the action or the cost to innocent people etc etc

Night people.... H

[Edited by Houlbt - 1/25/2003 11:42:27 PM]

dsmith 26 January 2003 12:33 AM

.

Soulgirl 26 January 2003 10:45 PM

Its ok guys... they caught the culprit!
CNN NEWS

Miles 26 January 2003 11:21 PM

The story from The Register.....

Huxley 26 January 2003 11:45 PM

Miles

[img]images/smilies/mad.gif[/img]That fookin site has the habbit filling your screen with fook knows how many popups[img]images/smilies/mad.gif[/img] I wish i could feck there servers up somehow as that sort of thing realy gets on my t1ts and it's almost as bad as junk mail through the post[img]images/smilies/mad.gif[/img]

Huxley

stevem2k 27 January 2003 10:26 AM

We're over the moon ... internally the only thing it affected was the timesheet system :D :D :D :D

Steve

Foot_Tapper 27 January 2003 11:11 AM

LOL very good Soulgirl, the popups you have are very helpful as well.


All times are GMT +1. The time now is 11:06 AM.


© 2024 MH Sub I, LLC dba Internet Brands