Loading...
[get complete service list]
Top of page
Port Information
Protocol Service Name
tcp ms-sql-s Microsoft-SQL-Server
udp ms-sql-s Microsoft-SQL-Server
Top IPs Scanning
Today Yesterday
190.202.131.74 (422)201.242.99.33 (498)
190.207.56.232 (357)142.93.119.147 (362)
190.207.186.126 (292)190.202.27.10 (345)
167.250.49.84 (281)200.93.25.153 (333)
190.75.69.82 (234)87.120.115.34 (217)
186.92.99.140 (231)66.240.223.202 (190)
190.198.70.239 (155)79.124.58.18 (188)
200.109.9.116 (113)89.248.165.110 (182)
117.143.63.222 (94)66.240.236.109 (158)
41.141.56.158 (70)66.240.236.116 (145)
Port diary mentions
URL
Mailbag Items for Ports 1433 and 113
Solution to the TCP 1433 Traffic
Port 1433 scanning
If there are some unexploited MSSQL Servers With Weak Passwords Left: They got you now (again)
Top of page
User Comments
Submitted By Date
Comment
Marcus H. Sachs, SANS Institute 2003-10-10 00:50:59
SANS Top-20 Entry: W2 Microsoft SQL Server (MSSQL) http://isc.sans.org/top20.html#w2 The Microsoft SQL Server (MSSQL) contains several serious vulnerabilities that allow remote attackers to obtain sensitive information, alter database content, compromise SQL servers, and, in some configurations, compromise server hosts. MSSQL vulnerabilities are well-publicized and actively under attack. Two recent MSSQL worms in May 2002 and January 2003 exploited several known MSSQL flaws. Hosts compromised by these worms generate a damaging level of network traffic when they scan for other vulnerable hosts.
Johannes Ullrich 2002-10-10 17:21:35
Port 1433 is used by Microsoft SQL Server. SQLSnake is one worm taking advantage of SQL Server installs without password. As SQL Server is able to run batch files and command line programs, it can be used to download and install malware. Basic Protection: Use good passwords for all SQL Server accounts.
Top of page
CVE Links
CVE # Description
Top of page