Re: Decrease in 1433 Scans?

From: loon (loonat_private)
Date: Thu May 23 2002 - 09:59:40 PDT

  • Next message: MIS Department: "Re: Decrease in 1433 Scans?"

    I am still recieving hits, although we only get hit by a single host, 
    around once every 1-1.5 hours, albeit multiple connections per hit. So, 
    our answer here would have to be - steady.
     On Thu, 23 May 2002, Matt Barton wrote:
    > Hello
    > Access attempts to port 1433 have been steady all this week, with tons of
    > attempts every hour showing up in our firewall log; however, I have not
    > had a single attempt since 5:43 AM EST (no EDT here in Indiana).
    > The firewall is still logging and the integrity of my access-list appears
    > to be fine.  I doubt our uplink provider is doing this, as I can reach the
    > firewall if I attempt to connect to port 1433 with nmap from a remote
    > system.
    > Anyone else seeing this?
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see:

    This archive was generated by hypermail 2b30 : Thu May 23 2002 - 10:09:57 PDT