I ran a simple script:
for I in `grep DPT messages | awk '{print $10}' | cut -b5- | sort | uniq`; do
echo $I;
fwhois $I@whois.arin.net | sed -n "2p";
nslookup -sil $I | sed -n "3,99p";
done
And discovered I had been probed for the SQL Server 7 Admin Port Vulnerability
by several Phoenix business and corporations. That is to say, more Phoenix
businesses than any other City in the world (except for Universities).
Come on people - patch your boxes. Set up firewalls. Security 101. Hello?!?
George