[unisog] 1433 scan increase

Jeff Kell jeff-kell at utc.edu
Fri Dec 31 19:51:33 GMT 2004


John K Lerchey wrote:
> Yes, we're seeing them at CMU. No reports of compromised machines yet 
> though.

> On Wed, 29 Dec 2004 zero at zero.byzero.net wrote:
>> Anyone seeing an increase in port 1433 (MS SQLServer) scans over the 
>> last 24 hours?  It seems to have slowed down over the last 18 hours or 
>> so but continues.  I'm seeing this from many IP addresses mostly in Asia.

Increase here in 1434/udp, haven't seen that in some time.  Recent ones 
that are particularly unusual are from source port 0 to dest port 1434. 
  I'm seeing a slow scan right now from 222.149.235.237.

Jeff



More information about the unisog mailing list