• About Us
  • Search
  • Compatibility
  • Forums
  • Archive
  • Channels
  • Home
  • Search
  • Member List
  • Calendar
  • Help

Current time: 11-23-2008, 10:17 AM Hello There, Guest! (Login — Register)


Warp2Search - Your Daily Tech News Service / Hardware & Software / Windows 9x/Me/2K/XP/Vista / port 1433 scans up dramatically--The Internet Storm Center..

Post Reply  Post Thread 
Threaded Mode | Linear Mode
port 1433 scans up dramatically--The Internet Storm Center..
Author Message
WonderMonky
Junior Member
**


Posts: 1
Group: Registered
Joined: May 2002
Status: Offline
Reputation: 0
Post: #1
port 1433 scans up dramatically--The Internet Storm Center..

Go ahead check your Logs youll see...
I started noticing dozens of these scans around Monday night and they continue today. It seems to be a MSSQL Worm
Graph: http://isc.incidents.org/port_details.ht...33&tarax=1
Description : http://www.incidents.org/diary/diary.php?id=156

This post was last modified: 05-21-2002 11:00 PM by WonderMonky.

05-21-2002 10:40 PM
Find all posts by this user Quote this message in a reply
Guest
Unregistered


Post: #2
Don't get bitten by Spida

Spida (js.spida.b.worm, also known as Double Tap and SQLSnake) is an Internet worm now attacking Microsoft SQL servers worldwide.

Written in JavaScript, Spida actively scans port 1433 for access into systems with blank system administrator accounts. According to the SANS Institute, a computer research organization, system administrators began noticing an upsurge in scans on port 1433, which is used by Microsoft's SQL servers, on Monday, May 20, 2002. Within the first 12 hours, the number of scanned and infected systems rose sharply to more than 1,600, and those systems are now scanning for others on the Internet.

In addition to port scanning, the worm collects and e-mails passwords from the infected servers. Users of Microsoft Windows 95, 98, or Me are not affected by the Spida worm. So there is an advantage to running inferior OS's after all. Not you could run latest iterations of SQL dbs on these OS's though.

For more Info see http://www.neowin.net

05-21-2002 11:00 PM
Quote this message in a reply
shadow_warez
Member
***


Posts: 69
Group: Registered
Joined: May 2002
Status: Offline
Reputation: 0
Post: #3
black ice

have you tryed useing a firewall? :o

05-21-2002 11:41 PM
Find all posts by this user Quote this message in a reply
Guest
Unregistered


Post: #4
Re: black ice

shadow_warez Wrote:
have you tryed useing a firewall? :o

-----------have you tried using a dictionary?
I build hardware firewalls for a living my friend. I was only making an observation....cheers :wink:

05-22-2002 12:19 AM
Quote this message in a reply
shadow_warez
Member
***


Posts: 69
Group: Registered
Joined: May 2002
Status: Offline
Reputation: 0
Post: #5
what kind of harware firewalls?

what kinda firewalls do ya build. do they have encrpytion beter then 128, like 168 :roll:

05-22-2002 04:22 AM
Find all posts by this user Quote this message in a reply
« Next Oldest | Next Newest »
Post Reply  Post Thread 

View a Printable Version
Send this Thread to a Friend
Subscribe to this Thread | Add Thread to Favorites

Forum Jump:

Contact Us | Warp2Search.Net | Return to Top | Return to Content | RSS Syndication

Powered By MyBB
Copyright © 2002-2008 MyBB Group