nanog mailing list archives
Re: worm changes port
From: fingers <fingers () fingers co za>
Date: Mon, 23 Sep 2002 03:37:38 +0200 (SAST)
Curious to see how many saw the worm 2002 traffic change to UDP port 4156 at about 5PM Sat.It hit hard here this Sunday afternoon. Found 3 servers that helped in the DDOS going on.. what fun.
by DDoS, are you talking about actual attack traffic, or just traffic from other infected hosts, to your 3, on udp port 4156? I was of the understanding that the 4156 traffic is just "bot speak" between the infected hosts, and not actual attack traffic? Regards --Rob
Current thread:
- Re: [nanog]software routers Vadim Antonov (Sep 22)
- worm changes port jnull (Sep 22)
- Re: worm changes port Mike Harrison (Sep 22)
- Re: worm changes port fingers (Sep 22)
- Re: worm changes port Mike Harrison (Sep 22)
- worm changes port jnull (Sep 22)