[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[RT] Security Alert -- massive flood against UPD port 1434



PureBytes Links

Trading Reference Links

Jan 25, 10am  

Sometime late lastnight my ATT cable shot up to 99% utilization and continues to do so 10 hours later. On checking my firewall, I discovered numerous computers trying to access UDP port 1434 on my computer. Seems like a DDS attack gone amuck.

If you have cable/DSL and are always online without a firewall, you may want to get your O/S to temporarily disable UDP port 1434.  

- mark jurik

=================================================================================
PS - Here is a sample of my firewall report:

JAN 25 11:19:06 2003
IP Packet discarded from 209.202.216.54 to 12.254.77.80 for port 1434 (UDP)

JAN 25 11:13:56 2003
IP Packet discarded from 130.243.8.153 to 12.254.77.80 for port 1434 (UDP)

JAN 25 11:02:56 2003
IP Packet discarded from 216.148.227.68 to 12.254.77.80 for port 29493 (UDP)

JAN 25 10:59:43 2003
IP Packet discarded from 208.57.243.220 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:49:51 2003
IP Packet discarded from 212.113.161.133 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:48:40 2003
IP Packet discarded from 209.73.224.142 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:46:41 2003
IP Packet discarded from 212.19.197.98 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:43:39 2003
IP Packet discarded from 65.163.241.18 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:41:36 2003
IP Packet discarded from 217.22.192.119 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:40:44 2003
IP Packet discarded from 64.53.181.2 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:40:03 2003
IP Packet discarded from 216.140.239.162 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:35:03 2003
IP Packet discarded from 65.118.28.230 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:34:22 2003
IP Packet discarded from 210.238.195.14 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:31:10 2003
IP Packet discarded from 168.156.112.177 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:29:15 2003
IP Packet discarded from 12.144.155.21 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:29:08 2003
IP Packet discarded from 209.202.216.54 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:24:36 2003
IP Packet discarded from 62.118.252.82 to 12.254.77.80 for port 1434 (UDP)

JAN 25 10:23:44 2003
IP Packet discarded from 218.30.21.201 to 12.254.77.80 for port 1434 (UDP)

To unsubscribe from this group, send an email to:
realtraders-unsubscribe@xxxxxxxxxxxxxxx

 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/