IIS 5.0 Got hacked

5 Jun 2006 7:10 AM

Orvs

I'm running IIS 5.0 and quite outdated..
the site got hacked today, the default.html was replaced by somthing
weird... defamed.

How I can check my Active Log(W3C Extended logt)... A lot of usuall things.!

I want to find out FTP access from sourceIP to destination IP on particular
date?
any help or futher info would surely help me. any tools

thanks.

5 Jun 2006 1:31 PM

Funkadyleik Spynwhanker

Wipe the machine. It's screwed and won't ever work right (nor should it be
trusted) again.

Next time, patch your stuff. Stop being part of the problem.

Show quoteHide quote

"Orvs" <O***@discussions.microsoft.com> wrote in message
news:F26AF8EF-B108-40A8-A5A8-BBAAD7BB7BB1@microsoft.com...
> I'm running IIS 5.0 and quite outdated..
> the site got hacked today, the default.html was replaced by somthing
> weird... defamed.
>
> How I can check my Active Log(W3C Extended logt)... A lot of usuall
> things.!
>
> I want to find out FTP access from sourceIP to destination IP on
> particular
> date?
> any help or futher info would surely help me. any tools
>
>
> thanks.
>
>
>
>
>
>
>
>
>
>
>
>