c. Figure out how they got in, reinstall the box, get a firewall and keep up on the latest patches. More then likely you are running sql on a default port on a public ip (a major no no). This combined with weak passwords for one of your accounts led to the compromise.
BTW, FBI won't get involved btw unless there's over 10k in damages. Russ > -----Original Message----- > From: Don L [mailto:[EMAIL PROTECTED] > Sent: Friday, February 15, 2008 12:52 PM > To: CF-Talk > Subject: OT - Box has been attacked by cowboy > > Yesterday around 7pm EST my box has been ruthlessly attacked (port scan > and then data/schema alternation) by 75.126.166.15, which traced to > SoftLayer Technologies, Inc. in TX. > > My course of actions: > a) prepare a law suit; > b) inform FBI. > > On b), I don't know if I should inform FBI branch in TX or just own state > or both. Evil doers must be stopped soon. > > Your thoughts would be appreciated. > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;160198600;22374440;w Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:299107 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
