[Dshield] RedHat systems seem to originate a lot of port 1433 attacks

Ed Truitt ed.truitt at etee2k.net
Sat May 25 13:43:46 GMT 2002


This may be consistent with the reports there are actually several worms
loose - one of which reportedly attacks MS-SQL systems from a *nix box.

----- Original Message -----
From: "John Sage" <jsage at finchhaven.com>
To: <list at dshield.org>
Cc: "Samantha Fetter" <sama at enteract.com>
Sent: Friday, May 24, 2002 11:34 PM
Subject: Re: [Dshield] RedHat systems seem to originate a lot of port 1433
attacks


> On Wed, May 22, 2002 at 01:35:03PM -0400, Jon R. Kibler wrote:
> <snip>
> > This seems consistent with what we have been seeing. At least half
> of the systems hitting us (actually, all but a couple of the systems
> where someone was willing to talk to us!) were RedHat Linux systems.
> <snip>
>
> I have seen nothing of the sort.
>
> Here's an example listing, from IP's posted to the list a day
> ago. There's not a Red Hat box in the lot:
>
[SNIP]




More information about the list mailing list