[lug] port 1433

[Doug Shaw]

Shannon Johnston correctly identified this as SQLsnake, which has been out 
and scanning for explotable MS SQLServer installations since May:

http://online.securityfocus.com/news/429

I've had hits on port 1433 from over a thousand unique hosts since the 
beginning of June alone.  Did I mention that I'm on a dynamically-addressed 
dialup account?

Doug


At 2247 8/14/02, Tony Dyson wrote:
>That is the port MS SQL Server uses by default, & there have been a number 
>of vulnerabilities revealed recently.
>
>D. Stimits wrote:
>>I am not 100% positive (more like 99%), but I think this is the Microsoft 
>>SQL, not mysql. Most likely this is an attempt to find an exploit, but it 
>>won't be an exploit on anything not running Microsoft SQL.
>
>_______________________________________________
>Web Page:  http://lug.boulder.co.us
>Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>Join us on IRC: lug.boulder.co.us port=6667 channel=#colug