This seems to have started for us about 4:30pm (GMT+11) today.
Lucky for us we block all MS-SQL 1434/udp traffic. We have logged over
130,000 firewall blocked connections across 15 odd sites, and it's comming in
from all over the world.
I don't have any infected servers to study the habits...
This seems to have started for us about 4:30pm (GMT+11) today.
Lucky for us we block all MS-SQL 1434/udp traffic. We have logged over
130,000 firewall blocked connections across 15 odd sites, and it's comming in
from all over the world.
I don't have any infected servers to study the habits...
[ more ]