On Sat, Aug 03, 2002, Dale Amon wrote: > What would be interesting about Port 1433? I seem to be seeing hits > on it on different, well seperated networks. Is it a destination for > worms and virii?
The port 1433/tcp is the Microsoft SQL Server port.. an interesting port if you are able to guess the "sa" password (usually null) since you are then able to run shell commands with administrator rights. The recent "Spida worm" exploited exactly this: http://www.cert.org/incident_notes/IN-2002-04.html -- MaXX
