[Dshield] Spammers discover the SQL Slammer concepts works - UDP 1026 spam traffic up

Blake McNeill mcneillb at linklogger.com
Tue Sep 16 11:33:44 GMT 2003


I did some research tonight and wrote a new utility (PortPuker) to investigate the increase of Spam traffic on UDP port 1026 and it would appear that spammers have discovered what gave SQL Slammer killer performance can also give them killer performance.  They are now using single packet to a single UDP port (just like SQL Slammer) to crank their delivery rates through the roof and hence the increase in traffic on UDP port 1026.

See http://www.LinkLogger.com/portpuker.htm

NOTE we also released a new version of our popular free PortPeeker utility available at http://www.linklogger.com/portpeeker.htm

Its now time for some much needed sleep.

Thanks
Blake McNeill
http://www.SonicLogger.com - Logging Software for SonicWall
http://www.LinkLogger.com - Logging Software for Linksys, Netgear and Zyxel



More information about the list mailing list