UDP port 4000 traffic: likely a new worm

[Rodney_Joffe1]

Unfortunately the vulnerability has proven to not be restricted to port 4000. Keep monitoring SANS