RE: Increased connects to Port 1433

From: Tom Pope (tpope@orixcm.com)
Date: 05/21/02


From: "Tom Pope" <tpope@orixcm.com>
To: <Lee_Fisher@NAI.com>, <incidents@securityfocus.com>
Date: Tue, 21 May 2002 10:42:05 -0500

check this -> http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q313418

-----Original Message-----
From: Lee_Fisher@NAI.com [mailto:Lee_Fisher@NAI.com]
Sent: Tuesday, May 21, 2002 10:26 AM
To: incidents@securityfocus.com
Subject: RE: Increased connects to Port 1433

From other newsgroups, I can tell you it looks like a SQL worm.

Details still coming in.

Lee Fisher
McAfee Best Practices

-----Original Message-----
From: Darrin Powell [mailto:dpowell@lssi.net]
Sent: 21 May 2002 15:33
To: incidents@securityfocus.com
Subject: Increased connects to Port 1433

Is anyone else seeing this?

Thanks

-- 
Darrin Powell
System Administrator
LSSi, Corp.
(919) 466-6803

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com



Relevant Pages

  • Re: Worm1800.exe on UnderNet?
    ... :!Notice!: A Recent Port Scan on your Computer reveals that Port 1800 ... For more information on this free incident handling, management ... and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: Port 6635
    ... >We received a very fast scan for port 6635 last night. ... >For more information on this free incident handling, management ... >and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • RE: A small quandary
    ... This list is provided by the SecurityFocus ARIS analyzer service. ... and tracking system please see: http://aris.securityfocus.com ... For more information on this free incident handling, management ...
    (Incidents)
  • RE: Anyone seen this before?
    ... The answer to this is, in task manager, you can right click on any app ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: Code Red - A Possible Origin?
    ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)