Code Red http://en.wikipedia.org/wiki/Code_Red_(computer_worm) did a lot of damage, but I believe it was an attack on IIS, therefor TCP based.