Increase in MS-SQL Probes



We have been seeing an increase in port 1433 in the past few days.
Multiple probes directed towards port 1433 are still being captured.
Just this day, the probes came from not less than 10 different IP
sources for one target. Bulk of the IP sources are coming from
mainland China but a number of probes can be traced to Hong Kong and
Korea.

Full write-up:
http://www.philippinehoneynet.org/data.php

Ryan Talabis
Philippine Honeynet Project