The NETSTAT information is as follows, is it a Trojan horse, how to solve it?

liunan9

:\Documents and Settings\Administrator> NETSTAT

ctive Connections

 Proto Local Address Foreign Address State
 TCP clx: 1736 59.151.21.101:http ESTABLISHED
 TCP clx: 1738 222.77.179.5:http ESTABLISHED
 TCP clx: 1739 222.77.179.5:http ESTABLISHED
 TCP clx: ms-sql-s 222.39.89.138:1035 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1048 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1144 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1171 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1182 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1214 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1448 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1515 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1550 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1631 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1935 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1979 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2080 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2104 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2137 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2141 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2253 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2260 TIME_WAIT

whlw00

Can't see it!

vgf10002

NETSTAT -an

wjcllove

Probably not a Trojan horse
222.39.89.138 This IP address is trying to connect to your server's sqlserver
It is best to block the connection to sqlserver on the firewall, or change the default port of sqlserver and set a strong sa password

sniperyb

TCP clx: ms-sql-s 222.39.89.138:1035 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1048 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1144 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1171 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1182 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1214 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1448 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1515 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1550 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1631 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1935 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:1979 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2080 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2104 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2137 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2141 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2253 TIME_WAIT
 TCP clx: ms-sql-s 222.39.89.138:2260 TIME_WAIT
Estimated to be doing multi-threaded password cracking

x790htt

Temporarily turn MS-SQL, some people are doing violent cracks