Security Incidents mailing list archives
RE: Strange scan on 1433
From: "David LaPorte" <david_laporte () harvard edu>
Date: Tue, 21 May 2002 11:23:13 -0400
They're looking for MS-SQL servers with blank/default sa passwords that are missing the MS02-020 patch: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/ bulletin/MS02-020.asp We've been getting killed with these since yesterday. David LaPorte -----Original Message----- From: Pavel Lozhkin [mailto:pavel () atrivo com] Sent: Tuesday, May 21, 2002 9:38 AM To: incidents () securityfocus com Subject: Strange scan on 1433 I got a lot of scans today on port 1433 from numerous nets (part of them are .jp and .kr, but not all) Does anyone know what they're looking for on the port ? I've never been scanned on the port before. -- Pavel ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Strange scan on 1433 Pavel Lozhkin (May 21)
- Re: Strange scan on 1433 dr john halewood (May 21)
- Re: Strange scan on 1433 Jason Robertson (May 21)
- RE: Strange scan on 1433 David LaPorte (May 21)
- RE: Strange scan on 1433 Deus, Attonbitus (May 21)
- RE: Strange scan on 1433 Blake Frantz (May 21)
- Re: Strange scan on 1433 George Bakos (May 21)
- Worms and CScript/WScript Blake Frantz (May 21)
- Re: Worms and CScript/WScript Ryan Russell (May 21)
- RE: Worms and CScript/WScript Michael Wright (May 21)
- RE: Worms and CScript/WScript Nick FitzGerald (May 22)
- RE: Worms and CScript/WScript Richard H. Cotterell (May 26)
- RE: Worms and CScript/WScript Nick FitzGerald (May 27)
- RE: Worms and CScript/WScript Richard H. Cotterell (May 28)
- Re: Strange scan on 1433 dr john halewood (May 21)