Re: windows 2000 professional hacked with Serv-U FTP Server

From: Jeff Cochran (jcochran.nospam@naplesgov.com)
Date: 11/25/02 

From: jcochran.nospam@naplesgov.com (Jeff Cochran)
Date: Mon, 25 Nov 2002 12:37:24 GMT

>This machine was not running IIS. how did they get in? auditing was turned
>off so no security info.

Is your firewall blocking ports 137-139? Are you using strong
passwords? Have you *now* truned on auditing so you can see future
attacks? After having reformatted and reinstalled to eliminate the
trojans/back doors/etc.?

Jeff

Relevant Pages

  • event viewer/security
    ... Are you running IIS? ... auditing do you have enabled? ... >when checking event viewer there are numerous anonymous ... Is somebody hacking into my computer or what? ...
    (microsoft.public.security)
  • Upgrading from NT4 to SBS2003 Premium
    ... We have an NT4 server (workgroup environment) running IIS. ... It has a complicated configuration with auditing, ...
    (microsoft.public.windows.server.sbs)
Loading