Post reply

Am I being attacked???

  • November 9, 2006 at 3:01 pm

    #62375

    Hello,

    I got the following output from NETSTAT and am wondering if someone tried to do something for my SQL server.

    Can anyone help me?

    Thanks.

    c:\NETSTAT

    Active Connections

    Proto Local Address Foreign Address State

    TCP ns:1080 dsl-189-132-189-229.prod-infinitum.com.mx:2833ESTABLISHED

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:1049 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:1108 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:1349 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:1500 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:1561 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:1743 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:1979 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:2265 ESTABLISHED

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:3533 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:3813 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:4142 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:4271 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:4477 TIME_WAIT

    TCP ns:ms-sql-s 227-72-109-203.static.youtele.com:4939 TIME_WAIT

  • November 10, 2006 at 12:12 pm

    #671166

    Yes.  It was me.  Sorry.

    But seriously, someone from the youtele.com domain (most likely), probably from the IP address 203.109.72.227, made connection attempts to your SQL server.

    If you allow connections directly from the Internet to your SQL server, you should expect this on a regular basis.

     

    Good luck!

    jg

     

     

  • November 10, 2006 at 2:14 pm

    #671180

    Ahh,,,  Thanks a lot for your input...  Time to setup firewall or something..

  • November 13, 2006 at 5:27 am

    #671299

    Time to setup a firewall? What year is it again?

  • November 13, 2006 at 12:27 pm

    #671424

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply