[lug] port 1433

[j davis]

Hello,
  for the last few months i have been getting tcp request from the internet
to port 1433...mysql. I dont have any sql servers running on the box in 
question..
is this a scan for a exploit...or is this just a box spewing out random 
crap.

Aug 13 03:56:54 www kernel: IPT INT>FIRE:IN=eth0 OUT=
MAC=00:01:02:8f:de:db:00:30:85:e5:b7:64:08:00 SRC=211.244.220.87 
DST=10.0.0.2 LEN=48
TOS=0x00 PREC=0x00 TTL=106 ID=28391 DF PROTO=TCP SPT=1551 DPT=1433 
WINDOW=16384
RES=0x00 SYN URGP=0
Aug 13 03:56:57 www kernel: IPT INT>FIRE:IN=eth0 OUT=
MAC=00:01:02:8f:de:db:00:30:85:e5:b7:64:08:00 SRC=211.244.220.87 
DST=10.0.0.2 LEN=48
TOS=0x00 PREC=0x00 TTL=106 ID=28634 DF PROTO=TCP SPT=1551 DPT=1433 
WINDOW=16384
RES=0x00 SYN URGP=0
Aug 13 03:57:03 www kernel: IPT INT>FIRE:IN=eth0 OUT=
MAC=00:01:02:8f:de:db:00:30:85:e5:b7:64:08:00 SRC=211.244.220.87 
DST=10.0.0.2 LEN=48
TOS=0x00 PREC=0x00 TTL=106 ID=29113 DF PROTO=TCP SPT=1551 DPT=1433 
WINDOW=16384
RES=0x00 SYN URGP=0


thanks,
jd

jd at taproot.bz
http://www.taproot.bz

_________________________________________________________________
Join the world’s largest e-mail service with MSN Hotmail. 
http://www.hotmail.com