Ditto, no decrease here, although no increase either.... Rick -----Original Message----- From: loon [mailto:loonat_private] Sent: May 23, 2002 1:00 PM To: Matt Barton Cc: incidentsat_private Subject: Re: Decrease in 1433 Scans? I am still recieving hits, although we only get hit by a single host, around once every 1-1.5 hours, albeit multiple connections per hit. So, our answer here would have to be - steady. cheers, loon On Thu, 23 May 2002, Matt Barton wrote: > Hello > > Access attempts to port 1433 have been steady all this week, with tons of > attempts every hour showing up in our firewall log; however, I have not > had a single attempt since 5:43 AM EST (no EDT here in Indiana). > > The firewall is still logging and the integrity of my access-list appears > to be fine. I doubt our uplink provider is doing this, as I can reach the > firewall if I attempt to connect to port 1433 with nmap from a remote > system. > > Anyone else seeing this? > > ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Thu May 23 2002 - 10:44:44 PDT