RE: Increased connects to Port 1433

From: Pour, Matthew (mpourat_private)
Date: Tue May 21 2002 - 08:21:26 PDT

Next message: Tracey Losco: "Re: Increased connects to Port 1433"

Previous message: Darrin Powell: "Increased connects to Port 1433"
Maybe in reply to: Darrin Powell: "Increased connects to Port 1433"
Next in thread: Tracey Losco: "Re: Increased connects to Port 1433"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

There are scanning for SQL hosts.  The first packet is for a SQL handshake;
the second packet is an attempt to log onto SQL with the default SQL SA
password.

Matthew Pour
BMC Software
713.918.1606

-----Original Message-----
From: Darrin Powell [mailto:dpowellat_private] 
Sent: Tuesday, May 21, 2002 9:33 AM
To: incidentsat_private
Subject: Increased connects to Port 1433

Is anyone else seeing this?






Thanks
-- 
Darrin Powell
System Administrator
LSSi, Corp.
(919) 466-6803


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Tracey Losco: "Re: Increased connects to Port 1433"
Previous message: Darrin Powell: "Increased connects to Port 1433"
Maybe in reply to: Darrin Powell: "Increased connects to Port 1433"
Next in thread: Tracey Losco: "Re: Increased connects to Port 1433"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue May 21 2002 - 08:35:10 PDT