Home All Groups Group Topic Archive Search About

Help , Several Connections , Port : 1433

Author
7 Jul 2005 6:05 AM
test
Environment:
SQL Server Standard Edition
Microsoft Windows NT - 5.2 (3790)
8.00.760 (SP3)


DOS Command : netstat -n . Results as follows
Find several connections about port 1433


Who can help me ? How to resolve the problem ?
Please , thank you .


..
..
..
..
  TCP    202.168.198.117:4941   202.181.68.244:1433    FIN_WAIT_1
  TCP    202.168.198.117:4942   202.181.71.66:1433     FIN_WAIT_1
  TCP    202.168.198.117:4943   202.168.198.116:1433   TIME_WAIT
  TCP    202.168.198.117:4945   202.181.68.123:1433    FIN_WAIT_1
  TCP    202.168.198.117:4950   202.181.68.123:1433    FIN_WAIT_1
  TCP    202.168.198.117:4959   202.181.70.183:1433    FIN_WAIT_1
  TCP    202.168.198.117:4959   202.181.92.3:1433      FIN_WAIT_1
  TCP    202.168.198.117:4963   202.181.71.66:1433     FIN_WAIT_1
  TCP    202.168.198.117:4964   202.181.95.40:1433     FIN_WAIT_1
  TCP    202.168.198.117:4966   202.181.87.84:1433     FIN_WAIT_1
  TCP    202.168.198.117:4966   202.181.94.137:1433    FIN_WAIT_1
  TCP    202.168.198.117:4968   202.181.66.159:1433    FIN_WAIT_1
  TCP    202.168.198.117:4970   202.181.71.66:1433     FIN_WAIT_1
  TCP    202.168.198.117:4971   202.181.64.246:1433    FIN_WAIT_1
  TCP    202.168.198.117:4976   202.181.94.137:1433    FIN_WAIT_1
  TCP    202.168.198.117:4984   202.181.95.40:1433     FIN_WAIT_1
  TCP    202.168.198.117:4985   202.181.95.40:1433     FIN_WAIT_1
  TCP    202.168.198.117:4989   202.181.90.133:1433    FIN_WAIT_1
  TCP    202.168.198.117:4992   202.181.66.159:1433    FIN_WAIT_1
  TCP    202.168.198.117:4992   202.181.90.133:1433    FIN_WAIT_1
  TCP    202.168.198.117:4996   202.181.88.249:1433    FIN_WAIT_1
  TCP    202.168.198.117:4999   202.181.87.238:1433    FIN_WAIT_1
..
..
..

Author
7 Jul 2005 7:10 AM
John Bell
Hi

You may want to do a netstat -n -o to find what process is trying to connect
to the servers. It sounds like some process is browsing the network for
servers and port 1433 is open on the remote servers.

John

Show quoteHide quote
"test" wrote:

>
>
> Environment:
> SQL Server Standard Edition
> Microsoft Windows NT - 5.2 (3790)
> 8.00.760 (SP3)
>
>
> DOS Command : netstat -n . Results as follows
> Find several connections about port 1433
>
>
> Who can help me ? How to resolve the problem ?
> Please , thank you .
>
>
> ..
> ..
> ..
> ..
>   TCP    202.168.198.117:4941   202.181.68.244:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4942   202.181.71.66:1433     FIN_WAIT_1
>   TCP    202.168.198.117:4943   202.168.198.116:1433   TIME_WAIT
>   TCP    202.168.198.117:4945   202.181.68.123:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4950   202.181.68.123:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4959   202.181.70.183:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4959   202.181.92.3:1433      FIN_WAIT_1
>   TCP    202.168.198.117:4963   202.181.71.66:1433     FIN_WAIT_1
>   TCP    202.168.198.117:4964   202.181.95.40:1433     FIN_WAIT_1
>   TCP    202.168.198.117:4966   202.181.87.84:1433     FIN_WAIT_1
>   TCP    202.168.198.117:4966   202.181.94.137:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4968   202.181.66.159:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4970   202.181.71.66:1433     FIN_WAIT_1
>   TCP    202.168.198.117:4971   202.181.64.246:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4976   202.181.94.137:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4984   202.181.95.40:1433     FIN_WAIT_1
>   TCP    202.168.198.117:4985   202.181.95.40:1433     FIN_WAIT_1
>   TCP    202.168.198.117:4989   202.181.90.133:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4992   202.181.66.159:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4992   202.181.90.133:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4996   202.181.88.249:1433    FIN_WAIT_1
>   TCP    202.168.198.117:4999   202.181.87.238:1433    FIN_WAIT_1
> ..
> ..
> ..
>
>
>
>
>
>
Author
7 Jul 2005 9:41 AM
test
netstat -ano , find : SID = 5664
tasklist , find : 5664 = syswinxp.exe

"syswinxp.exe" maybe a trojan .

Thanks for your help .



Show quoteHide quote
"John Bell" <jbellnewspo***@hotmail.com> ¼¶¼g©ó¶l¥ó·s»D:46CCFA26-F813-4A39-8EF9-EF517084B***@microsoft.com...
> Hi
>
> You may want to do a netstat -n -o to find what process is trying to
> connect
> to the servers. It sounds like some process is browsing the network for
> servers and port 1433 is open on the remote servers.
>
> John
>
> "test" wrote:
>
>>
>>
>> Environment:
>> SQL Server Standard Edition
>> Microsoft Windows NT - 5.2 (3790)
>> 8.00.760 (SP3)
>>
>>
>> DOS Command : netstat -n . Results as follows
>> Find several connections about port 1433
>>
>>
>> Who can help me ? How to resolve the problem ?
>> Please , thank you .
>>
>>
>> ..
>> ..
>> ..
>> ..
>>   TCP    202.168.198.117:4941   202.181.68.244:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4942   202.181.71.66:1433     FIN_WAIT_1
>>   TCP    202.168.198.117:4943   202.168.198.116:1433   TIME_WAIT
>>   TCP    202.168.198.117:4945   202.181.68.123:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4950   202.181.68.123:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4959   202.181.70.183:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4959   202.181.92.3:1433      FIN_WAIT_1
>>   TCP    202.168.198.117:4963   202.181.71.66:1433     FIN_WAIT_1
>>   TCP    202.168.198.117:4964   202.181.95.40:1433     FIN_WAIT_1
>>   TCP    202.168.198.117:4966   202.181.87.84:1433     FIN_WAIT_1
>>   TCP    202.168.198.117:4966   202.181.94.137:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4968   202.181.66.159:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4970   202.181.71.66:1433     FIN_WAIT_1
>>   TCP    202.168.198.117:4971   202.181.64.246:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4976   202.181.94.137:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4984   202.181.95.40:1433     FIN_WAIT_1
>>   TCP    202.168.198.117:4985   202.181.95.40:1433     FIN_WAIT_1
>>   TCP    202.168.198.117:4989   202.181.90.133:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4992   202.181.66.159:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4992   202.181.90.133:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4996   202.181.88.249:1433    FIN_WAIT_1
>>   TCP    202.168.198.117:4999   202.181.87.238:1433    FIN_WAIT_1
>> ..
>> ..
>> ..
>>
>>
>>
>>
>>
>>