Port 1434 was some kind of memory resident M$ Sql Server virus You can look it up at the symantec site or any other anti-virus site. It has cost me half my weekend, because of the traffic generated at our provider... our sites were completely blocked. It took them about 11 hours to solve the damn issue :-[ greetz Hans On Mon, 2003-01-27 at 04:44, jdow wrote: > From: "Stephen Carville" <carville@cpl.net> > > > On Sunday 26 January 2003 05:12 pm, Buck wrote: > > > I was wondering what they might be. I think 137 could be the > > microsoft > > > messenger popup ads looking for victims, but I don't know what port > > 1 > > > > http://www.cert.org/incident_notes/IN-98.01.irix.html > > Meanwhile, mixed in with the MS Locator Service and MS SQL probes of late > has been a highly unusual number of ICMP probes just in the last 24 hours. > Does the group mind here have any ideas on the ICMP probes? They seemed to > start about the time the MS SQL port 1434 was apparently blocked by the > DSL provider here. > > {^_^} Joanne, jdow@earthlink.net -- Hans Scheffers http://www.jiffie.nl/stamboom/ If you wish to live wisely, ignore sayings -- including this one. Linux Kernel 2.4.18-19 on a i686 - userid 282784 @ http://counter.li.org -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list
