Security Incidents mailing list archives
Source port 445,80
From: "Wong Yu Liang" <wong.yuliang () vads com>
Date: Wed, 5 Sep 2007 18:47:42 +0800
Hi all , Lately I've been getting a lot of awkward alerts with source port 445. A few different source IP is connecting to one single IP from the source port 445 , to random destination high ports. IPS is detecting ANS.1 bit string overflow on all these alerts. Anyone care to enlighten me about this ? Also I've been getting a lot of alerts with source port 80 that is connecting to port 1434 as well. Thanks & Regards ------------------------------------------------------------------------- This list sponsored by: SPI Dynamics ALERT: .How a Hacker Launches a SQL Injection Attack!.- White Paper It's as simple as placing additional SQL commands into a Web Form input box giving hackers complete access to all your backend systems! Firewalls and IDS will not stop such attacks because SQL Injections are NOT seen as intruders. Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/sql.asp?Campaign_ID=70160000000Cn8E --------------------------------------------------------------------------
Current thread:
- Source port 445,80 Wong Yu Liang (Sep 05)
- Re: Source port 445,80 Valdis . Kletnieks (Sep 05)
- RE: Source port 445,80 Wong Yu Liang (Sep 06)
- Re: Source port 445,80 Valdis . Kletnieks (Sep 06)
- RE: Source port 445,80 Wong Yu Liang (Sep 10)
- Re: Source port 445,80 Valdis . Kletnieks (Sep 10)
- RE: Source port 445,80 Wong Yu Liang (Sep 06)
- Re: Source port 445,80 scott (Sep 10)
- Re: Source port 445,80 Valdis . Kletnieks (Sep 05)