[Dshield] AlertCon update

Johannes B. Ullrich jullrich at sans.org
Thu Dec 11 19:45:44 GMT 2003


the combination of 139 and 1433 looks very much like a SQL Snake like
week password attack IMHO. Not sure how far something like this would go
these days. 

On Thu, 2003-12-11 at 13:32, Paul Marsh wrote:
> The AlertCon remains at Level 2 as our analysts monitor the elevated
> traffic associated with ports 1433 and 139. The active continues,
> however, the overall numbers have diminished
> 
> 
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 786 1563            
  fax: (617) 786 1550                          jullrich at sans.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20031211/414b999a/attachment.bin


More information about the list mailing list