 OT: MS-SQL DOS attack, anyone else noticed a spike lately? |
|
|
|
Porsche, and the Porsche crest are registered trademarks of Dr. Ing. h.c. F. Porsche AG.
This site is not affiliated with Porsche in any way. Its only purpose is to provide an online forum for car enthusiasts. All other trademarks are property of their respective owners. |
|
|
| SirAndy |
  Feb 3 2004, 01:39 PM
Post
#1
|
|
Resident German  Group: Admin Posts: 42,257 Joined: 21-January 03 From: Oakland, Kalifornia Member No.: 179 Region Association: Northern California  |
fellow geeks,
has anyone else noticed a significant increase in random packages on port 1433? we had a flat out DOS attack on the SQL server port trough all of last week, i finally had to change the standard port for SQL to get it running again. the packages still hit the router/firewall, but now they're just dropped. and they seem to come from everywhere, not just a single source. it slowed down our server(s) to a crawl ... Andy |
   |
 
|
  |
Replies
| SirAndy |
Feb 3 2004, 08:00 PM
Post
#2
|
|
Resident German Group: Admin Posts: 42,257 Joined: 21-January 03 From: Oakland, Kalifornia Member No.: 179 Region Association: Northern California |
QUOTE(airsix @ Feb 3 2004, 02:57 PM) The webserver should query the sql daemon via the localhost (127.0.0.1), not over the public interface (unless they are not both are running on the same box of course). i know and i do (for the web-server) but i'm also a lazy-ass and use the enterprise manager to remotely log in into my SQL7 server. therefore, i need a open port ... (IMG:style_emoticons/default/wink.gif) i changed the default port to something else and now it's fine. whatever tool/bug/virus was hitting us seems to be hardcoded to the default port ... Andy |
|
|
|
Posts in this topic
SirAndy OT: MS-SQL DOS attack Feb 3 2004, 01:39 PM
Qarl Nope... Firewall is not logging anything unusual..... Feb 3 2004, 01:47 PM airsix Andy,
I've not seen any high traffic on 1433. ... Feb 3 2004, 04:57 PM
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
|
Lo-Fi Version | Time is now: 11th July 2025 - 06:33 AM |
Invision Power Board
v9.1.4 © 2025 IPS, Inc.