RE: Strange scan on 1433

From: Dias Sgt Kristin F (DiasKFat_private)
Date: Tue May 21 2002 - 08:23:03 PDT

  • Next message: Keith T. Morgan: "RE: Increased connects to Port 1433"

    Vulnerable MS SQL Servers....
    
    This traffic is being seen everywhere for the past 10 hours.....
    
    Microsoft released a security bulletin on April 17 2002 (MS02-020) MS SQL
    buffer overflow vulnerability..
    
     Kristin 
    
    
    -----Original Message-----
    From: Pavel Lozhkin [mailto:pavelat_private]
    Sent: Tuesday, May 21, 2002 9:38 AM
    To: incidentsat_private
    Subject: Strange scan on 1433
    
    
    I got a lot of scans today on port 1433 from numerous nets (part of them
    are .jp and .kr, but not all)
    Does anyone know what they're looking for on the port ?
    I've never been scanned on the port before.
    
    -- 
    Pavel
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue May 21 2002 - 08:47:23 PDT