Incidents
Re: Compromised Windows Server Jun 06 2006 07:58AM
ross contextshift com
We're seeing one of our clients struggling from 139 and 445 scanning (a lot of windows desktops). It looks like the've been hit but I don't have access to any of the machines to investigate deeper. It's being blocked at the firewall so it's not contributing to the noise.

Us and 1/2 of our clients are seeing external scans (blocked) but nothing internally yet.

I'll post again when I have more info.

------------------------------------------------------------------------
------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29. August 3 in Las Vegas.
World renowned security experts reveal tomorrow.s threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------
------

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus