Home  |  Forums  |  914 Info  |  Blogs
 
914World.com - The fastest growing online 914 community!
 
Porsche, and the Porsche crest are registered trademarks of Dr. Ing. h.c. F. Porsche AG. This site is not affiliated with Porsche in any way.
Its only purpose is to provide an online forum for car enthusiasts. All other trademarks are property of their respective owners.
 

Welcome Guest ( Log In | Register )

> OT: MS-SQL DOS attack, anyone else noticed a spike lately?
SirAndy
post Feb 3 2004, 01:39 PM
Post #1


Resident German
*************************

Group: Admin
Posts: 42,257
Joined: 21-January 03
From: Oakland, Kalifornia
Member No.: 179
Region Association: Northern California



fellow geeks,
has anyone else noticed a significant increase in random packages on port 1433?

we had a flat out DOS attack on the SQL server port trough all of last week, i finally had to change the standard port for SQL to get it running again.
the packages still hit the router/firewall, but now they're just dropped.
and they seem to come from everywhere, not just a single source.
it slowed down our server(s) to a crawl ...

Andy
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
 
Reply to this topicStart new topic
Replies
SirAndy
post Feb 3 2004, 08:00 PM
Post #2


Resident German
*************************

Group: Admin
Posts: 42,257
Joined: 21-January 03
From: Oakland, Kalifornia
Member No.: 179
Region Association: Northern California



QUOTE(airsix @ Feb 3 2004, 02:57 PM)
The webserver should query the sql daemon via the localhost (127.0.0.1), not over the public interface (unless they are not both are running on the same box of course).

i know and i do (for the web-server) but i'm also a lazy-ass and use the enterprise manager to remotely log in into my SQL7 server.
therefore, i need a open port ... (IMG:style_emoticons/default/wink.gif)

i changed the default port to something else and now it's fine.
whatever tool/bug/virus was hitting us seems to be hardcoded to the default port ...

Andy
User is offlineProfile CardPM
Go to the top of the page
+Quote Post

Posts in this topic


Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



- Lo-Fi Version Time is now: 11th July 2025 - 06:33 AM