Security Incidents mailing list archives
port 1433?
From: sir_scriptzalot () HOTMAIL COM (Sir Scriptzalot)
Date: Sun, 25 Jun 2000 21:29:57 EST
Dear all,
Can anyone interpret this "attack" or seen something
similar? What service runs on port 1433 and note the
almost +1 incremental nature of the ports on the remote host.
Thanks
Max
remote host rport ourhost dport
Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4134|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4134|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4140|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
Jun 23 10:40|216.46.247.224|4140|dns-server.ourhost.com|1433
Max Steel
Omega-Xpress
________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
Current thread:
- Re: Permissions, (continued)
- Re: Permissions Jon Lewis (Jun 27)
- Probes for MySQL under Linux? Ralf G. R. Bergs (Jun 27)
- Re: Probes for MySQL under Linux? Tabor J. Wells (Jun 27)
- Port scan (106 and 389) Chris Laycock (Jun 28)
- Compromise and Bind Replacement Scott Brown (Jun 28)
- Re: Port scan (106 and 389) Fabio Pietrosanti (Jun 28)
- Re: Probes for MySQL under Linux? Al Huger - Mail Account (Jun 28)
- Was I exploited? Narins, Joshua (Jun 29)
- Re: Was I exploited? Russ Spooner (Jun 29)
- Re: Nike Site taken over Ballard, James (Jun 27)
- port 1433? Sir Scriptzalot (Jun 25)
- Re: port 1433? Jason Witty (Jun 27)
- Port 1433 Edwin Concepcion (Jun 26)
- Re: Port 7070? Ryan Russell (Jun 22)
- Re: Port 7070? Robert Graham (Jun 23)