[unisog] 1433 scan increase
jeff-kell at utc.edu
Fri Dec 31 19:51:33 GMT 2004
John K Lerchey wrote:
> Yes, we're seeing them at CMU. No reports of compromised machines yet
> On Wed, 29 Dec 2004 zero at zero.byzero.net wrote:
>> Anyone seeing an increase in port 1433 (MS SQLServer) scans over the
>> last 24 hours? It seems to have slowed down over the last 18 hours or
>> so but continues. I'm seeing this from many IP addresses mostly in Asia.
Increase here in 1434/udp, haven't seen that in some time. Recent ones
that are particularly unusual are from source port 0 to dest port 1434.
I'm seeing a slow scan right now from 126.96.36.199.
More information about the unisog