UDP Port 1434 – ms-sql-m

About UDP Port 1434

Port 1434 is registered with the Internet Assigned Numbers Authority (IANA) for ms-sql-m. The IANA description reads: ‘Microsoft-SQL-Monitor’. This port is referenced in 7 IDS rules and exhibits moderate malware activity in monitored traffic.

IDS Rule References

7 IDS / security rules reference UDP port 1434. Presence in IDS rules does not mean traffic on this port is malicious. These are patterns security tools monitor.

Rule categories (top 4): misc-attack (3), misc-activity (2), attempted-admin (1), trojan-activity (1).

Sample rule descriptions for UDP port 1434:

• SQL Worm propagation attempt
• SQL Worm propagation attempt OUTBOUND
• SQL ping attempt
• SERVER-MSSQL version overflow attempt
• MALWARE-OTHER SQL Slammer worm propagation attempt inbound

Malware Activity

A meaningful share of monitored traffic on this port involves malware indicators.

1 of 7 IDS rules for UDP port 1434 involve malware activity.

Data Sources

This information is compiled from: IANA Service Name and Transport Protocol Port Number Registry, Emerging Threats Open Ruleset (BSD 2-Clause / GPLv2 per SID range), and Snort Community Rules (GPLv2).