I would like to get an expert opinion on how dangerous is it to have the database server name and SQL server instance and port number compromised by accidentally exposing it in source code snippet posted on the internet.
A connection string was accidentally posted on the internet with the username and password masked but the server name and sqlserver port number remaining in open text. The posted info contained the following:
sub.server.domain.tld/SqlServerXXXX;12345; User Id="MASKED" Password="MASKED" Initial Catalog="MASKED"
This Windows server is on a large corporate network Active Directory domain and is not public-facing, so it’s behind a standard set of firewalls, etc. It currently hosts a development database for an internal intranet website. The domain.tld is the same as the company web address.
So basically a potential attacker knows that a server named "sub.server.domain.tld" exists with SQLServer database(s) listening on port 12345 on the corporate network owned of the company "domain.tld".
What can they do with this kind of info?
How much danger is this server in? Should it be disconnected and burnt immediately?
Is there a danger to other computers on the network?