  Link Logger Premium,MVM join:2001-03-29 Calgary, AB
·Shaw
| reply to RadRick Re: New Worm - UDP 1434 - SQL Server Monitor??
I am at the tail end of a development cycle so I'm out of the game for anything other then noticing this. If anyone has a honeypot, tune it to UDP port 1434 and see what is happening. Seems to be spreading rather quickly. Seems to have an across the board random IP generator as I only see single hits from any one system (unlike Code Red which used a weighted IP generation algo).
Blake |