Computing.Net > Forums > Networking > Server Question

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Server Question

Reply to Message Icon

Name: the RAM
Date: April 27, 2008 at 17:46:58 Pacific
OS: Server
CPU/Ram: Server
Product: Server
Comment:

I own a home http server, and, sometimes several times a day, I get weird incoming connections. I trace all of the IP addresses to foreign lands, like China and Mexico, and Taiwan. They are all connections made from some big industry, like one was from a meteorology institute or similar. All of the connections made try to use the same login name "Administrator".

Is it an accident? Is there some sort of story behind this?



Sponsored Link
Ads by Google

Response Number 1
Name: StuartS
Date: April 27, 2008 at 19:06:59 Pacific
Reply:

Hackers trying to break in. Just make sure your security settings are configured correctly and don't run your machine with an Administrator log on.

Stuart


0

Response Number 2
Name: stevem5000
Date: April 27, 2008 at 19:49:34 Pacific
Reply:

Since hackers know that the administrator account gives them access to the family jewels...if they get the password...

I suggest you change the name of the administrator account...you can make it anything you want...this is considered by most security folks to be normal part of "hardening" the security...

I suspect they are looking for "easy" web servers to put their virus/spyware crap on...


0

Response Number 3
Name: the RAM
Date: April 27, 2008 at 20:45:35 Pacific
Reply:

But why is it always some sort of large company?

Thanks for the tips.


0

Response Number 4
Name: c4ifford
Date: April 28, 2008 at 08:05:36 Pacific
Reply:

I had this same issue at work, and its the same company usually Bejing Telecom something something... because in China... there is only one internet company =)


0

Response Number 5
Name: the RAM
Date: April 28, 2008 at 08:09:06 Pacific
Reply:

One or two of the attacks were from telecom. What is up with that???


0

Related Posts

See More



Response Number 6
Name: wanderer
Date: April 28, 2008 at 08:13:04 Pacific
Reply:

point you are missing RAM is hackers use compromized machines. Doesn't matter where those machines are found. Could be your pc or one in the White House. You don't get hacked directly because its a crime to hack/steal from someone. You wouldn't want the law to track you to your house would you? Same with hackers.

Imagine the power of knowing how to internet search
http://www.lib.berkeley.edu/Teachin...


0

Response Number 7
Name: the RAM
Date: April 28, 2008 at 08:21:09 Pacific
Reply:

I just realized that after I posted. Thanks.


0

Response Number 8
Name: Brandon Winborne
Date: May 7, 2008 at 13:30:56 Pacific
Reply:

They could be IP masks. I found a software that changed IP addresses and spoofed them to seem like they're from Turkey etc. Also, just block the addresses from accessing your server. I assume you have a Firewall, so when they attempt to connect, block their domain.

I'm here to help as best I can...


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Networking Forum Home


Sponsored links

Ads by Google


Results for: Server Question

Windows 2000 Advanced Server question... www.computing.net/answers/networking/windows-2000-advanced-server-question/1446.html

DHCP Server Question www.computing.net/answers/networking/dhcp-server-question/23676.html

printer server question (maybe not) www.computing.net/answers/networking/printer-server-question-maybe-not/29458.html