cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
232
Views
0
Helpful
3
Replies

error message

aksher
Level 1
Level 1

I am getting thusands of error messages

on port 135,139-netbios and port 1433.what is the root cause for this.

3|Nov 02 2006 23:39:18|106011: Deny inbound (No xlate) tcp src Wm:10.161.67.57/3064 dst Wm:10.161.72.238/135

3 Replies 3

dgahm
Level 8
Level 8

That looks like hacking port scans. This is pretty normal on the Internet, but your 10. addresses would indicate this is internal to your network? Did it just start? Is it scanning addresses sequentially? Is the source address always the same?

it's started 1 day back and it is increasing now.the src is from 3-4 adresses from same subnet.

tsteger1
Level 8
Level 8

It could also be that somehting is trying to connect to a SQL database using named pipes and it is not set up to allow it.

It may be that someone has SQL Enterprise Manager installed and it is scanning for databases on your network.

Tom S

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: