Re: Can Somone Tell Me If We Have a Hacker?

You can use the security area to lock down what IPs are allowed.

"razor" <razor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4C8EA201-C01F-4289-91EE-D29664409791@xxxxxxxxxxxxxxxx
OK. Unfortunatly, we have programmers that need to ftp into that server
from
outside our nework and so we have the leave the port available on our
firewall.

We keep a faily complex password and change it about every 6 months.

Thanks,

sd

"Andrew Hodgson" wrote:

On Tue, 27 Jun 2006 09:26:02 -0700, razor
<razor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Hello--

I am pasting an event log from our IIS/web server that repeats about 50
times every day during non-business hours. Our SQL administrator seems
to
believe that somone is trying to hack into our system via FTP.

I would say the same, probably a dictionary attack, because
administrator is usually a user on a Windows system. Can you firewall
the FTP port or use another FTP package on the Internet interface?

Thanks.
Andrew.
--
Andrew Hodgson in Bromyard, Herefordshire, UK.
My Email: use <andrew at hodgsonfamily dot org>.



.

Relevant Pages

  • Re: Can Somone Tell Me If We Have a Hacker?
    ... Our SQL administrator seems to ... administrator is usually a user on a Windows system. ... the FTP port or use another FTP package on the Internet interface? ... Andrew Hodgson in Bromyard, Herefordshire, UK. ...
    (microsoft.public.inetserver.iis.security)
  • RE: Telnet/ftp problems SBS2000
    ... Please make sure your client computers are configured as both Firewall ... will find two options "Enable folder view for FTP sites" and "Use Passive ... that the control connection has been successfully established, ... (other than port 21) ...
    (microsoft.public.windows.server.sbs)
  • FTP transfer port
    ... FTP transfer port ... the FTP server "listens" for client connections on its port 21. ... it will establish a separate control connection and data connection with ...
    (bit.listserv.ibm-main)
  • Re: Hacked? External address knocks on internal private address...
    ... The important part of your message is that FTP is allowed out... ... You open a connection to an FTP Server and logon. ... When you ask the server for a file the server issues a "PORT" command ... so it can open a port on the firewall to allow the incoming Data ...
    (comp.security.firewalls)
  • Re: Question: FTP via alternate port
    ... The problem with FTP is that it requires two ports to operate. ... FTP command stream in order to dynamically open that port for the data ... Ideally the attacker would want to upload another tool onto the ...
    (Pen-Test)