RE: Decrease in 1433 Scans?

["Salisko, Rick" <SaliskoR () ottawapolice ca>]

Ditto, no decrease here, although no increase either....

Rick

-----Original Message-----
From: loon [mailto:loon () loadedpenguin com]
Sent: May 23, 2002 1:00 PM
To: Matt Barton
Cc: incidents () securityfocus com
Subject: Re: Decrease in 1433 Scans?


I am still recieving hits, although we only get hit by a single host, 
around once every 1-1.5 hours, albeit multiple connections per hit. So, 
our answer here would have to be - steady.

cheers, 
loon

 On Thu, 23 May 2002, Matt Barton wrote:

> Hello
>
> Access attempts to port 1433 have been steady all this week, with tons of
> attempts every hour showing up in our firewall log; however, I have not
> had a single attempt since 5:43 AM EST (no EDT here in Indiana).
>
> The firewall is still logging and the integrity of my access-list appears
> to be fine.  I doubt our uplink provider is doing this, as I can reach the
> firewall if I attempt to connect to port 1433 with nmap from a remote
> system.
>
> Anyone else seeing this?


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com