Port 1433 Port Scans

Ever since my first post in these forums I've been receiving repeated port scans on port 1433 looking, I assume, for an SQL server since this is the port that Microsoft's SQL server runs on. (I'm running mySQL anyway... and any decent hacker would know that I'm running Linux and not Windows! heheh)

Attempts have been fast and furious the past few days after being sporadic for about a month.

I can't be certain that this forum is where they have harvested my URL, but the timing of the attempts to get at the SQL server and the nature of this website makes it the most likely candidate.

Just wanted to share this information with other users so they can be aware that there are probably people up to no good grabbing information from these message boards and that you might want to turn off displaying your URL in your profile if you're ultra-paranoid like I am.

Hmmm..that's interesting. I think I might have to set up a honey pot to see if someone is actually picking up website urls from here...

Thanks for the info!

My bad, Matt...

It seems that there is a SQLSnake worm going around which exploits a buffer overflow in Microsoft SQL Server version 7 and 2000. It is likely that this is the cause of the port 1433 probes I've been experiencing...

Here's a couple of links to read up on it:

http://www.incidents.org/diary/diary.php?id_6

http://online.securityfocus.com/news/429