Security Incidents mailing list archives
RE: Strange scan on 1433
From: James <james () james-web net>
Date: Tue, 21 May 2002 15:06:51 -0400
Most of those I've seen have been coming out of RIPE assigned blocks, but I just saw the first US cable IP come across. - James
-----Original Message----- From: Pavel Lozhkin [mailto:pavel () atrivo com] Sent: Tuesday, May 21, 2002 9:38 AM To: incidents () securityfocus com Subject: Strange scan on 1433 I got a lot of scans today on port 1433 from numerous nets (part of them are .jp and .kr, but not all) Does anyone know what they're looking for on the port ? I've never been scanned on the port before. -- Pavel -------------------------------------------------------------- -------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- RE: Strange scan on 1433, (continued)
- RE: Strange scan on 1433 Blake Frantz (May 21)
- Re: Strange scan on 1433 George Bakos (May 21)
- Worms and CScript/WScript Blake Frantz (May 21)
- Re: Worms and CScript/WScript Ryan Russell (May 21)
- RE: Worms and CScript/WScript Michael Wright (May 21)
- RE: Worms and CScript/WScript Nick FitzGerald (May 22)
- RE: Worms and CScript/WScript Richard H. Cotterell (May 26)
- RE: Worms and CScript/WScript Nick FitzGerald (May 27)
- RE: Worms and CScript/WScript Richard H. Cotterell (May 28)
- RE: Strange scan on 1433 Blake Frantz (May 21)
- Re: Strange scan on 1433 Johannes Ullrich (May 21)