Security Incidents mailing list archives
Re: Compromised Windows Server
From: ross () contextshift com
Date: 6 Jun 2006 07:58:03 -0000
We're seeing one of our clients struggling from 139 and 445 scanning (a lot of windows desktops). It looks like the've been hit but I don't have access to any of the machines to investigate deeper. It's being blocked at the firewall so it's not contributing to the noise. Us and 1/2 of our clients are seeing external scans (blocked) but nothing internally yet. I'll post again when I have more info. ------------------------------------------------------------------------------ This List Sponsored by: Black Hat Attend the Black Hat Briefings & Training USA, July 29. August 3 in Las Vegas. World renowned security experts reveal tomorrow.s threats today. Free of vendor pitches, the Briefings are designed to be pragmatic regardless of your security environment. Featuring 36 hands-on training courses and 10 conference tracks, networking opportunities with over 2,500 delegates from 40+ nations. http://www.blackhat.com ------------------------------------------------------------------------------
Current thread:
- Re: Compromised Windows Server, (continued)
- Re: Compromised Windows Server pauls (Jun 05)
- Re: Compromised Windows Server Jason Ross (Jun 05)
- Re: Compromised Windows Server Axel Pettinger (Jun 06)
- Re: Compromised Windows Server Harlan Carvey (Jun 06)
- Re: Compromised Windows Server Patrick Beam (Jun 06)
- Re: Compromised Windows Server Kees Leune (Jun 07)
- Re: Compromised Windows Server Isaac Perez (Jun 06)
- Re: Compromised Windows Server Macleonard Starkey (Jun 06)
- Re: Re: Compromised Windows Server wnorth (Jun 05)
- Re: Compromised Windows Server Butterworth, Jim (Jun 06)
- Re: Compromised Windows Server ross (Jun 06)
- RE: Compromised Windows Server Alan Davies (Jun 08)
- Re: Compromised Windows Server df (Jun 08)