Port 1433?  | | 
July 27th, 2002, 09:19 AM
|
#1 (permalink)
| | Member
Join Date: Jan 2002 Location: Grand Marais,MN
Posts: 231
|
Good morning all!  What is up with port 1433? Its been hit 20 times since 4:30AM. Thanks. | 
|  | |
July 27th, 2002, 09:23 AM
|
#2 (permalink)
| | addicted
Join Date: Oct 2001 Location: Ohio
Posts: 6,103
| | |
| | |
July 27th, 2002, 09:32 AM
|
#3 (permalink)
| | Member
Join Date: Jan 2002 Location: Grand Marais,MN
Posts: 231
|
__________________
Registered Linux user #316144
| |
| | |
July 27th, 2002, 01:01 PM
|
#4 (permalink)
| | may contain mild peril
Join Date: Oct 2001 Location: UK
Posts: 3,329
|
There is a worm going around hunting for MS SQL servers that are running default passwords. I regularly get scanned by infected machines, the majority of which appear to be in korea.
__________________
I dreamt that a large eagle circled the room three times and then got into bed with me and took all the blankets.
| |
| | |
July 27th, 2002, 01:12 PM
|
#5 (permalink)
| | Senior Member
Join Date: Oct 2001 Location: D-Fw Texas
Posts: 766
|
AKA SQLsnake.
DVNT, I get hit constantly by this according to my ZA, but the vast majority of them come from Tiawan/Korea.
Some of the IPs that it comes from are in the US, but I was wondering if it would be worth the effort to tell them if they knew their machines were broadcasting?
Would it be worth the time to drop them a note asking them to check their servers?
I won't bother with the overseas ones, because the last time I did, I got a reply back something to the effect of " we don't care.."
Is this thing kind of like Klez, in that they don't know they are broadcasting?
Just a thought, because this has been going on for quite a while, aand it seems to not be getting any better..  | |
| | |
July 27th, 2002, 01:40 PM
|
#6 (permalink)
| | Goverment property now
Join Date: Oct 2001 Location: Norfolk, VA
Posts: 27,972
|
Desmo more business here i believe would love to know that there are having machines broadcasting out to be taken over. give them a try. never hurts to try. more news on SQLsnake | |
| | |
July 27th, 2002, 03:35 PM
|
#7 (permalink)
| | Member
Join Date: Jan 2002 Location: Grand Marais,MN
Posts: 231
| | |
| | |
July 27th, 2002, 03:46 PM
|
#8 (permalink)
| | addicted
Join Date: Oct 2001 Location: Ohio
Posts: 6,103
|
I wouldn't expect too much of a response, but I know I would want someone to tell me if something on a network I take care of was infected or otherwise scanning others.
You may find this link interesting, along with the other reports this site offers... http://www.dshield.org/top10.html | |
| | | Thread Tools | Search this Thread | | | | |
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | | | | Most Active Discussions  | | | | |   Recent Discussions  | | | | |
 |
hardware
prices 
