Re: Strange scan on 1433

From: Johannes Ullrich (jullrich@sans.org)
Date: 05/21/02


Date: Tue, 21 May 2002 15:26:37 -0400
From: "Johannes Ullrich" <jullrich@sans.org>
To: "James" <james@james-web.net>


We just finished a more detailed analysis of 'SQLsnake':

http://www.incidents.org/diary/diary.php?id=157

(aka 'Spida')

-- 
---------------------------------------------------------------
jullrich@sans.org             Collaborative Intrusion Detection         
                                     join http://www.dshield.org

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com



Relevant Pages

  • Re: Strange Folder
    ... Is it likely this person busted my account password and then signed ... >>> The other day I noticed a strange folder had been created ... >>> This list is provided by the SecurityFocus ARIS analyzer service. ...
    (Incidents)
  • Re: [CERT] Re: Compromised FBSD/Apache
    ... >>>This list is provided by the SecurityFocus ARIS analyzer service. ... >>>For more information on this free incident handling, management ...
    (Incidents)
  • RE: Anyone????? FW: Concept Virus(CV) V.5 - Quick analysis update
    ... >>> This list is provided by the SecurityFocus ARIS analyzer service. ... >>> For more information on this free incident handling, management ...
    (Incidents)
  • RE: Compromised FBSD/Apache
    ... >>>This list is provided by the SecurityFocus ARIS analyzer service. ... >>>For more information on this free incident handling, management ...
    (Incidents)
  • RE: DOS ATTACK
    ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)