People are scanning for 1433, and trying to connect as "sa" with a blank
password.  There's no real exploit here, just the stupidity of the admins
who aren't blocking 1433 and leaving it open with a blank pass.

> -----Original Message-----
> From: ccox at linuxsnob.com [mailto:ccox at linuxsnob.com] 
> Sent: Tuesday, May 21, 2002 8:04 AM
> To: tclug-list at mn-linux.org
> Subject: Re: [TCLUG] firewall logs and Port 1433
> 
> 
> 	Yep, I'm getting a few here..
> 
> On Tue, 21 May 2002, Kelly Black wrote:
> 
> > Anybody else getting a pile of hits on their firewalls for 
> port 1433? 
> > Looks to be aimed at MS-SQL Server?  I am glad they (MS) 
> spent a whole 
> > month working on security.
> >
> > Kelly Black
> > KB0GBJ
> > _______________________________________________
> > Twin Cities Linux Users Group Mailing List - Minneapolis/St. Paul, 
> > Minnesota http://www.mn-linux.org tclug-list at mn-linux.org
> > https://mailman.mn-linux.org/mailman/listinfo/tclug-list
> >
> 
> -- LINUX, because rebooting is for adding hardware!
> www.linuxsnob.com <-- a little linux humor, and a very little support.
> 
> _______________________________________________
> Twin Cities Linux Users Group Mailing List - Minneapolis/St. 
> Paul, Minnesota
> http://www.mn-linux.org
> tclug-list at mn-linux.org
> https://mailman.mn-linux.org/mailman/listinfo/tclug-list
>