UBB.Developers Forums General Discussion Chit Chat Internet Slow Down

Apparently there has been a big internet slowdown due to a Microsoft SQL Virus causing the Microsoft Servers to attack each other.

My server was affected last night.... even though I'm unix, the road to my server was "clogged".

http://www.cnn.com/2003/TECH/internet/01/25/internet.attack.ap/index.html

This thing hit the network that my server is on too

my personal site has been down >3 days now... I keep updated with patches, but apparently this one snuck under the wire

I've missed Stand.

I heard on the news that this attack affected ATM machines and credit card transactions too.

Yieks!

I think threadsdev was up the whole time though.
Go infopop servers.

All of my servers were down for about 6-12 hours

I could occasionally get to them, but for the most part I would receive packetloss at a router about 3 hops away from my server. That was a pretty intense attack. It would be really scary to see what would happen if the whole internet stopped working for a whole day (including ATM machines!)

Got these links from an old internet provider:
[]"Sapphire" / "SQL Slammer" worm

Dear Valued Customer,

You may have noticed your website may have been unreachable Saturday morning / afternoon. A Malicious worm (named "Sapphire" / "SQL Slammer" worm ) was attacking Microsoft Windows Machines running SQL Server 2000 on all the major backbone providers. W32.SQLExp.Worm is a Category 3 worm that targets servers running Microsoft SQL. The worm sends 376 bytes to port 1434/udp (the SQL Server Resolution Service Port). The virus-like attack, which began about 12:30 a.m. EST, sought out vulnerable computers on the Internet to infect using a known flaw in the database software from Microsoft Corp., SQL Server 2000. But the attacking software was scanning for victim computers so randomly and so aggressively ˜ sending out thousands of probes a second ˜ that it saturated many Internet data pipelines. We blocked UDP port 1434 in our firewall at 12:45 a.m., but due to the large number of packets it sends out, the worm has the unintended payload of performing a Denial of Service Attack on all the major backbones. We are working closely with UUNET to resolve the issue.

You can read more about the issue at the following URLs:

http://news.com.com/2100-1001-982131.html?tag=fd_top

http://slashdot.org/articles/03/01/25/1245206.shtml?tid=109

http://www.cert.org/advisories/CA-2003-04.html

http://abcnews.go.com/wire/Politics/ap20030125_718.html

http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.html

http://story.news.yahoo.com/news?tmpl=story2&ncid=514&e=2&u=/ap/internet_attack
[/]