[Dshield] Spammers discover the SQL Slammer concepts works - UDP 1026 spam traffic up
mcneillb at linklogger.com
Tue Sep 16 11:33:44 GMT 2003
I did some research tonight and wrote a new utility (PortPuker) to investigate the increase of Spam traffic on UDP port 1026 and it would appear that spammers have discovered what gave SQL Slammer killer performance can also give them killer performance. They are now using single packet to a single UDP port (just like SQL Slammer) to crank their delivery rates through the roof and hence the increase in traffic on UDP port 1026.
NOTE we also released a new version of our popular free PortPeeker utility available at http://www.linklogger.com/portpeeker.htm
Its now time for some much needed sleep.
http://www.SonicLogger.com - Logging Software for SonicWall
http://www.LinkLogger.com - Logging Software for Linksys, Netgear and Zyxel
More information about the list