RE: Increased connects to Port 1433

From: Lee_Fisher@NAI.com
Date: 05/21/02


From: Lee_Fisher@NAI.com
To: incidents@securityfocus.com
Date: Tue, 21 May 2002 17:25:37 +0200

From other newsgroups, I can tell you it looks like a SQL worm.

Details still coming in.

Lee Fisher
McAfee Best Practices

-----Original Message-----
From: Darrin Powell [mailto:dpowell@lssi.net]
Sent: 21 May 2002 15:33
To: incidents@securityfocus.com
Subject: Increased connects to Port 1433

Is anyone else seeing this?

Thanks

-- 
Darrin Powell
System Administrator
LSSi, Corp.
(919) 466-6803

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com



Relevant Pages

  • RE: Malicious web sites
    ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: [incident] IIS defacement through FTP, possible DoS
    ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • RE: Distributed ICMP/UDP scan or attack?
    ... This list is provided by the SecurityFocus ARIS analyzer service. ... and tracking system please see: http://aris.securityfocus.com ... For more information on this free incident handling, management ...
    (Incidents)
  • Re: strange attacks - flood udp packets from 1030 to msql
    ... > This list is provided by the SecurityFocus ARIS analyzer service. ... For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • RE: Can anyone identify this backdoor?
    ... > and tracking system please see: http://aris.securityfocus.com ... This list is provided by the SecurityFocus ARIS analyzer service. ... For more information on this free incident handling, management ...
    (Incidents)