Port 1433

[mer.concepcion () CODETEL NET DO (Edwin Concepcion)]

Port 1433 is MS-SQL Server 7.0 service port...
Maybe the "atacker" was looking for a lame database server from Microsoft...

Usually the NT Administrators leave the SQL SERVER with the default administrator "sa" and no password....

Oh, please!!!

Edwin Concepcion

----- Original Message ----- 
From: "Sir Scriptzalot" <sir_scriptzalot () HOTMAIL COM>
To: <INCIDENTS () SECURITYFOCUS COM>
Sent: Sunday, June 25, 2000 10:29 PM
Subject: port 1433?

> Dear all,
>
> Can anyone interpret this "attack" or seen something
> similar? What service runs on port 1433 and note the
> almost +1 incremental nature of the ports on the remote host.
>
> Thanks
> Max
>
>               remote host   rport   ourhost             dport
> Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4134|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4134|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4135|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4138|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4140|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4139|dns-server.ourhost.com|1433
> Jun 23 10:40|216.46.247.224|4140|dns-server.ourhost.com|1433
>
> Max Steel
> Omega-Xpress
>
>
> ________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com