[SpamCop-List] Re: 1433

[kram]

"BeeGee" <nobody> wrote in message
news:acj9qb$te2$1
> I'm on dial-up and my firewall logs show 7 attempts on 1433 since
yesterday.
> I'm not running SQL either.  The past 2 days I've gotten more attempts on
> 1433 than on 1214 -- that's noteworthy.
>
> "Hated by Spammies" <Xdilbert84> wrote in message
> news:acinhr$hgb$1
> > Just for GPs, I put a firewall tag-for-analysis on any 1433
> > port attempts yesterday - and just caught one.  I'm safe, no
> > problem since don't have sql running, but ... interesting
> > especially since I'm on a dial-up.
> > --

I have 141 attempts at 1433 since yesterday (as of  *tick* right now)
I am also on a dial-up with no SQL running on this machine.

All probes come in sets of 3, from all different IP addresses.

It has been discussed in a different thread (subject ="New exploit?  SQL
port probes")
that there is a new worm running around trying to pick at SQL ports. Has
anyone heard
anything about this more recently? (ugh ... bad grammar....shoot myself now
*bam*)

--
KK

"So long, and thanks for all the fish"