Level3 routing issues?
Christopher J. Wolff
chris at bblabs.com
Sat Jan 25 07:21:25 UTC 2003
Of the customers I've had to shut off for being DOS targets, all are
windows boxen. Perhaps there is a new windows exploit?
Regards,
Christopher J. Wolff, VP CIO
Broadband Laboratories, Inc.
http://www.bblabs.com
-----Original Message-----
From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On Behalf Of
hc
Sent: Friday, January 24, 2003 11:39 PM
To: Joel Perez
Cc: Aaron Burnett; Alex Rubenstein; nanog at merit.edu
Subject: Re: Level3 routing issues?
Okay this is getting bad.. one of our routers just locked up from udp
1434's. Can't even telnet to it now.
-hc
Joel Perez wrote:
>My firewalls are going nuts with hits on UDP port 1434 also from
>everywhere!
>
> -----Original Message-----
> From: Aaron Burnett [mailto:listkeep at yet-another.com]
> Sent: Sat 1/25/2003 1:19 AM
> To: Alex Rubenstein
> Cc: hc; nanog at merit.edu
> Subject: Re: Level3 routing issues?
>
>
>
>
>
> On Sat, 25 Jan 2003, Alex Rubenstein wrote:
>
> >
> >
> > I dunno about that. But, I am seeing, in the last couple
hours, all kinds
> > of new traffic.
> >
> > like, customers who never get attacked or anything, all of a
sudden:
> >
> >
http://mrtg.nac.net/switch9.oct.nac.net/3865/switch9.oct.nac.net-3865.ht
ml
> >
> >
> > We are seeing this on ports all across out network -- nearly
1/2 our ports
> > are in delta alarm right now.
> >
> > Anyone else?
> >
>
> Yep. Since about 12:30 am. Getting pounded on UDP port 1434 from
all over
> the world to any address on my network.
>
>
>
>
>
More information about the NANOG
mailing list