Re: Decrease in 1433 Scans?
From: loon (loon@loadedpenguin.com)Date: 05/23/02
- Previous message: Matt Barton: "Decrease in 1433 Scans?"
- In reply to: Matt Barton: "Decrease in 1433 Scans?"
- Next in thread: MIS Department: "Re: Decrease in 1433 Scans?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 23 May 2002 11:59:40 -0500 (CDT) From: loon <loon@loadedpenguin.com> To: Matt Barton <matt@webexc.com>
I am still recieving hits, although we only get hit by a single host,
around once every 1-1.5 hours, albeit multiple connections per hit. So,
our answer here would have to be - steady.
cheers,
loon
On Thu, 23 May 2002, Matt Barton wrote:
> Hello
>
> Access attempts to port 1433 have been steady all this week, with tons of
> attempts every hour showing up in our firewall log; however, I have not
> had a single attempt since 5:43 AM EST (no EDT here in Indiana).
>
> The firewall is still logging and the integrity of my access-list appears
> to be fine. I doubt our uplink provider is doing this, as I can reach the
> firewall if I attempt to connect to port 1433 with nmap from a remote
> system.
>
> Anyone else seeing this?
>
>
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
- Previous message: Matt Barton: "Decrease in 1433 Scans?"
- In reply to: Matt Barton: "Decrease in 1433 Scans?"
- Next in thread: MIS Department: "Re: Decrease in 1433 Scans?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
