[unisog] 1433 scan increase

Ken Connelly Ken.Connelly at uni.edu
Wed Dec 29 21:02:59 GMT 2004


The 24th was high(er) here, too, but not the highest in the past ten 
days.  I saw just over a million 1433 packets on the 24th, compared to 
1.58 million on the 20th, 1.17 million on the 27th, but only 479000 on 
the 28th.

- ken

Wes Young wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> we saw a ton christmas-eve day... had to block it....
>
> zero at zero.byzero.net wrote:
> | Anyone seeing an increase in port 1433 (MS SQLServer) scans over the
> last 24 hours?  It seems to have slowed down over the last 18 hours or
> so but continues.  I'm seeing this from many IP addresses mostly in Asia.
> | _______________________________________________
> | unisog mailing list
> | unisog at lists.sans.org
> | http://www.dshield.org/mailman/listinfo/unisog
> |
> |
>
> - --
> Wes Young
> Network Security Analyst
> University at Buffalo
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.5 (MingW32)
>
> iD8DBQFB0wm3zLe0Tk6uDXYRAo95AKCqnpGJ84tvljSRHOe/Gtwg9SfXEACgkDfJ
> LroMVslO/ZsYs65BUn3Z7Ms=
> =yI5s
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog


-- 
- Ken
=================================================================
Ken Connelly Systems and Operations Manager, ITS Network Services
University of Northern Iowa           Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu
phone: (319) 273-5850   fax: (319) 273-7373

It's much more important to know what you don't know than what you do know!





More information about the unisog mailing list