[Dshield] SQL Port 1433

Fitton, Robert "Bob" Rfitton at laborready.com
Wed May 22 16:39:15 GMT 2002


And here are the ones that scanned us (starting Monday 5/20)
Generally, they scanned each address 3 times during a short window (several seconds)
I've checked them against all the posted lists that I collected from Intrusions and DShield, and have not found even a SINGLE DUPLICATE..??

63.105.204.55
64.113.210.105
146.101.6.30
168.103.131.14
200.39.114.98
207.207.20.130
208.177.61.16 (a partial scan, only a few of our addresses, and only once)
209.176.79.218
211.243.73.70
213.25.52.180

Bob Fitton, Network Specialist
Labor Ready, Inc.
Tacoma, WA 98401


>-----Original Message-----
>From: Micheal Patterson [mailto:micheal at cancercare.net]
>Sent: Wednesday, May 22, 2002 8:37 AM
>To: list at dshield.org
>Subject: Re: [Dshield] SQL Port 1433
>
>
>Add  these to the list as well. These are the ip's that have 
>hit my network
>over the last 10 days on port 1433. Most of these in this list have
>attempted to scan my entire netblock multiple times but were 
>stopped at my
>border firewall.




More information about the list mailing list