RE: Strange scan on 1433

From: Ken Pfeil (Ken@InfoSec101.org)
Date: 05/21/02 

From: "Ken Pfeil" <Ken@InfoSec101.org>
To: "Pavel Lozhkin" <pavel@atrivo.com>, <incidents@securityfocus.com>
Date: Tue, 21 May 2002 11:19:00 -0400

Maybe:

http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=JS_SQLSPIDA.B

> -----Original Message-----
> From: Pavel Lozhkin [mailto:pavel@atrivo.com]
> Sent: Tuesday, May 21, 2002 9:38 AM
> To: incidents@securityfocus.com
> Subject: Strange scan on 1433
>
>
> I got a lot of scans today on port 1433 from numerous nets (part of them
> are .jp and .kr, but not all)
> Does anyone know what they're looking for on the port ?
> I've never been scanned on the port before.
>
> --
> Pavel
>
> ------------------------------------------------------------------
> ----------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see: http://aris.securityfocus.com
>

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

Relevant Pages

  • Re: Worm1800.exe on UnderNet?
    ... :!Notice!: A Recent Port Scan on your Computer reveals that Port 1800 ... For more information on this free incident handling, management ... and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • RE: Increased connects to Port 1433
    ... Increased connects to Port 1433 ... For more information on this free incident handling, management ... and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: Port 6635
    ... >We received a very fast scan for port 6635 last night. ... >For more information on this free incident handling, management ... >and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • RE: possible ssh hack
    ... >> port 4207 ... >> analyzer service. ... >> and tracking system please see: ...
    (Incidents)
  • Re: Subseven Scans
    ... scans" are you referring to the default port? ... For more information on this free incident handling, management ... and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)