Re: I am getting hacked!!!

chris_at_nospam.com
Date: 05/04/04 

Date: Tue, 04 May 2004 05:25:53 GMT

On 3 May 2004 18:28:13 -0700, lorenzdominic_@hotmail.com (Dominic)
wrote:

>We have a windows nt4 small business server and I know that we are
>getting people trying to log onto our domain via the internet. As I
>can see them in the security log as unsuccessful logons, hundreds of
>them.
>
>Is there a way I can find out who these people are, because I have
>their user name and domain name in the log but do not know where the
>domain is from.
>
>How are people able to log into our server via the internet?
>
>How can I track them, and stop them?
>
>Your help is appreciated.
>Regards
>Dominic

For starters, INSTALL A FIREWALL! It sounds like you have netbios
exposed to the internet - a horrendously bad idea. I would guess that
you're already compromised and just don't know it yet.

-Chris

Relevant Pages

  • Re: Account has been locked out---Security Issue?
    ... If you are not using a properly configured firewall it is possible that someone is ... trying to access your computer from the internet. ... your computer and then you can view the security log in Event Viewer to find out what ... > automated hack out there that does this type of thing, ...
    (microsoft.public.win2000.security)
  • Re: Account keeps locking out !!
    ... Enable security auditing on your domain controller, for failure, logon and ... Then you will have entries in the security log with username, ... BTW, if you have a server that is on a network exposed to the internet, with ... no firewall between it and the internet, you may be getting attempts to log ...
    (microsoft.public.win2000.security)
  • Re: Netgear router penetrated?
    ... > Because private IP's are not supposed to be routable over the Internet, ... > internal side to the router. ... is are you utilizing any wireless within the LAN? ... >> I checked the security log in my Netgear FVS318 router/firewall today, ...
    (comp.security.firewalls)
  • smurf pinging router?
    ... I have a SMC router. ... Security Log ... Unless it's someone with a misconfigured machine pinging the internet side. ... AVG, Spybot, and Adaware say the Win98 box is clean. ...
    (comp.security.firewalls)
  • Re: security logs
    ... If you are connected to the internet without a properly configured firewall, ... attempts are being made to hack your computer. ... > on my security log get lots of attempted logons when im ... > by local security authority, ...
    (microsoft.public.windowsxp.security_admin)