can't you just do a netscan -a or something on it..... it should show you if you have a weird port
open...
--
=-=-=-=-=-=-=-=-=-=-=-=-=-[ Help me fight to keep my son in the US ]-=
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-[ http://keepmysoninthe.us ]-=
Tuesday, March 2, 2004, 1:05:05 PM, you wrote:
BN> Hello everyone...
BN> I am having some strange issues with my web server. I think someone has
BN> hacked into our box and is using it for file sharing. I have had this happen
BN> before but was always prompted by my antivirus software that some type of
BN> backdoor program was installed. This time I cannot find anything running or
BN> out of the ordinary, the only thing I can see is an increase of bandwidth
BN> per day. Usually I have about 350 Megs of Up/Down bandwidth everyday verry
BN> consistently. Now since last night I have had about 3.5 Gigs of bandwidth
BN> usage and rising. How can I find out where it's going?
BN> Is there some type of free port scanner that will give me a clue? I have run
BN> all the OS updates, virus updates and checked if any strange security
BN> accounts were created and I even changed all the passwords. I am pretty much
BN> the only one that has access to this system and no one else would have the
BN> ability to upload files. Luckily there is no sensitive info on this box just
BN> a few websites.
BN> So I guess my question is how can I track down who is accessing my system
BN> and how can protect it?
BN> Thanks for any advice...
BN> Neal Bailey
BN> Internet Marketing Manager
BN> E-mail: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
BN>
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]
