RE: RE: was BabyCam now hacking

["Roger" <roger@xxxxxxx>]

Put my Linux box up on the net, and saw the Apache logs filling with IIS
hack activity within three hours (Deliberately used Apache for this reason)

Put Win2k server on another machine, and was annoyed to see that IIS and
FTP
were running as standard!! Fortunately I am behind a NAT gateway/ router

As a side issue, can Homeseer use an external webserver (same or different
machine) for serving its web pages, or do you have to use its own server?

Roger Shingler

Thinking about Multitainer........

> Okay.  I'll shut up now shall I? :)
>
> (and yes, you _were_ mad!)
>
> Tony
> > -----Original Message-----
> > From: James, Daniel [mailto:daniel.james@xxxxxxx]
> > Sent: 14 March 2002 11:37
> > To: 'ukha_d@xxxxxxx'
> > Subject: RE: [ukha_d] RE: was BabyCam now hacking
> >
> >
> > Let me rephrase this........
> >
> > I have been hacked, and had changes made to IIS on my
> > machine, yes I was mad
> > to connect to ADSL on an unpatched Win2k workstation, with no
> > firewall, but
> > its easily done.............
> >
> > It was attacked within 2 hours of being put online, one
> > evening whilst I was
> > in the midst of building and configuring it, ironic really as I
was
> > downloading patches, firewall software and anti virus
> > software updates to
> > install on it.
> >
> > It *DOES* happen!!
> >
> > Thankfully, there are solutions, but it does highlight the
> > problems, and it
> > seems that script kiddies love to play around.
> >
> > Daniel
> >
> >
> >
> >
> > -----Original Message-----
> > From: BUTLER, Tony, FM [mailto:tony.butler@xxxxxxx]
> > Sent: 14 March 2002 11:28
> > To: 'ukha_d@xxxxxxx'
> > Subject: RE: [ukha_d] RE: was BabyCam now hacking
> >
> >
> > I meant who would specifically target your machine.
> >
> > I use a broadband router which blocks most of that crap
> automatically.
> >
> > Anyone can get a little port scanning proggie, but knowing
> > port 5238 is open
> > on your machine & it not responding to any 'standard'
> > protocol messages like
> > it was a telnet/ftp/http port, who is going really to bother
> > putting effort
> > into hacking your system when
> > a) there are loads of unprotected PC's out there
> broadcasting netbios
> > messages and
> > b) port 5238 is also open on bigcompany.com's site - so much more
> > interesting than yet-another-cable-modem-user.com's network :-)
> >
> > A little bit of paranoia never hurt anyone, I just think,
> > realistically,
> > there's no need to go OTT for most 'normal' people.
> >
> >
> > Tony
> >
> > "Just because you're paranoid, doesn't mean they're NOT out
> > to get you" :-]
> >
> > > -----Original Message-----
> > > From: Lee [mailto:lee@xxxxxxx]
> > > Sent: 14 March 2002 11:06
> > > To: ukha_d@xxxxxxx
> > > Subject: Re: [ukha_d] RE: was BabyCam now hacking
> > >
> > >
> > > >>who would bother
> > > >
> > > > unfortunately, loads of people, its easier prey than
> > > corporate sites.
> > > >
> > > > I had a number of attacks within a couple of hours of
installing
> > > > ADSL.....
> > >
> > > As Daniel said "Loads of people". When I was using
the
> > > Alcatel USB frog and
> > > ZoneAlarm, there there hundreds of dodgy connections to my
> > > server every
> > > day, including attempted NetBIOS connections...
> > > Now there is no-way anybody 'accidently' tries a NB
> > > connection, it's script
> > > kiddies running IP scans...
> > >
> > > It rapidly got to the point where I turned the ZA logging
off
> > > and just let
> > > it silently block the attempts.
> > >
> > > All the time and care that you've taken to set up your
system
> > > and the lorry
> > > loads of software on it can be trashed in minutes by the
> > s'kiddies, so
> > > let's be carefull out there... :)
> > >
> > > Lee.
> > >
> > >
> > >
> > >
> > > ------------------------ Yahoo! Groups Sponsor
> > > ---------------------~-->
> > > Buy Stock for $4.
> > > No Minimums.
> > > FREE Money 2002.
> > > http://us.click.yahoo.com/BgmYkB/VovDAA/ySSFAA/IBOolB/TM
> > >
--------------------------------------------------------------
> > > -------~->
> > >
> > > For more information: http://www.automatedhome.co.uk
> > > Post message: ukha_d@xxxxxxx
> > > Subscribe:  ukha_d-subscribe@xxxxxxx
> > > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > > List owner:  ukha_d-owner@xxxxxxx
> > >
> > > Your use of Yahoo! Groups is subject to
> > > http://docs.yahoo.com/info/terms/
> > >
> > >
> >
> >
> >
********************************************************************
> >       Visit our Internet site at http://www.rbsmarkets.com
> >
> > This e-mail is intended only for the addressee named above.
> > As this e-mail may contain confidential or privileged
information,
> > if you are not the named addressee, you are not authorised to
> > retain, read, copy or disseminate this message or any part of it.
> >
********************************************************************
> >
> >
> > For more information: http://www.automatedhome.co.uk
> > Post message: ukha_d@xxxxxxx
> > Subscribe:  ukha_d-subscribe@xxxxxxx
> > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > List owner:  ukha_d-owner@xxxxxxx
> >
> > Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
>
>
>
> ***********************************************************
> This message is confidential and intended for the exclusive
> use of the addressee(s) only and remains the property of
> Exchange FS Group plc. You should not disclose its contents
> to any other person. If you are not the intended recipient
> please notify the sender named above immediately.
>
> Registered Office: Munro House, Portsmouth Road, Cobham,
> Surrey, KT11 1TE. Registered in England No. 2596452
> ***********************************************************
>
>
>
> For more information: http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
>
>
>
> ********************************************************************
>       Visit our Internet site at http://www.rbsmarkets.com
>
> This e-mail is intended only for the addressee named above.
> As this e-mail may contain confidential or privileged information,
> if you are not the named addressee, you are not authorised to
> retain, read, copy or disseminate this message or any part of it.
> ********************************************************************
>
> ------------------------ Yahoo! Groups Sponsor
> ---------------------~-->
> Buy Stock for $4.
> No Minimums.
> FREE Money 2002.
> http://us.click.yahoo.com/BgmYkB/VovDAA/ySSFAA/IBOolB/TM
> --------------------------------------------------------------
> -------~->
>
> For more information: http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
>
>


For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/