RE: RE: was BabyCam now hacking

["James, Daniel" <daniel.james@xxxxxxx>]

Let me rephrase this........

I have been hacked, and had changes made to IIS on my machine, yes I was
mad
to connect to ADSL on an unpatched Win2k workstation, with no firewall, but
its easily done.............

It was attacked within 2 hours of being put online, one evening whilst I
was
in the midst of building and configuring it, ironic really as I was
downloading patches, firewall software and anti virus software updates to
install on it.

It *DOES* happen!!

Thankfully, there are solutions, but it does highlight the problems, and it
seems that script kiddies love to play around.

Daniel




-----Original Message-----
From: BUTLER, Tony, FM [mailto:tony.butler@xxxxxxx]
Sent: 14 March 2002 11:28
To: 'ukha_d@xxxxxxx'
Subject: RE: [ukha_d] RE: was BabyCam now hacking


I meant who would specifically target your machine.

I use a broadband router which blocks most of that crap automatically.

Anyone can get a little port scanning proggie, but knowing port 5238 is
open
on your machine & it not responding to any 'standard' protocol messages
like
it was a telnet/ftp/http port, who is going really to bother putting effort
into hacking your system when
a) there are loads of unprotected PC's out there broadcasting netbios
messages and
b) port 5238 is also open on bigcompany.com's site - so much more
interesting than yet-another-cable-modem-user.com's network :-)

A little bit of paranoia never hurt anyone, I just think, realistically,
there's no need to go OTT for most 'normal' people.


Tony

"Just because you're paranoid, doesn't mean they're NOT out to get
you" :-]

> -----Original Message-----
> From: Lee [mailto:lee@xxxxxxx]
> Sent: 14 March 2002 11:06
> To: ukha_d@xxxxxxx
> Subject: Re: [ukha_d] RE: was BabyCam now hacking
>
>
> >>who would bother
> >
> > unfortunately, loads of people, its easier prey than
> corporate sites.
> >
> > I had a number of attacks within a couple of hours of installing
> > ADSL.....
>
> As Daniel said "Loads of people". When I was using the
> Alcatel USB frog and
> ZoneAlarm, there there hundreds of dodgy connections to my
> server every
> day, including attempted NetBIOS connections...
> Now there is no-way anybody 'accidently' tries a NB
> connection, it's script
> kiddies running IP scans...
>
> It rapidly got to the point where I turned the ZA logging off
> and just let
> it silently block the attempts.
>
> All the time and care that you've taken to set up your system
> and the lorry
> loads of software on it can be trashed in minutes by the s'kiddies, so
> let's be carefull out there... :)
>
> Lee.
>
>
>
>
> ------------------------ Yahoo! Groups Sponsor
> ---------------------~-->
> Buy Stock for $4.
> No Minimums.
> FREE Money 2002.
> http://us.click.yahoo.com/BgmYkB/VovDAA/ySSFAA/IBOolB/TM
> --------------------------------------------------------------
> -------~->
>
> For more information: http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
>
>


********************************************************************
Visit our Internet site at http://www.rbsmarkets.com

This e-mail is intended only for the addressee named above.
As this e-mail may contain confidential or privileged information,
if you are not the named addressee, you are not authorised to
retain, read, copy or disseminate this message or any part of it.
********************************************************************


For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/



***********************************************************
This message is confidential and intended for the exclusive
use of the addressee(s) only and remains the property of
Exchange FS Group plc. You should not disclose its contents
to any other person. If you are not the intended recipient
please notify the sender named above immediately.

Registered Office: Munro House, Portsmouth Road, Cobham,
Surrey, KT11 1TE. Registered in England No. 2596452
***********************************************************