4. The server is behind a firewall. 5. Apparently it is throwing up some red flags, because he bothered to post a question asking for help here.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Monday, April 03, 2006 4:02 PM To: [email protected] Subject: RE: [IMail Forum] OT - MSFTPSRV 1: If some one is trying to log on with the administrator account and password, how could that be good? 2: Use the FTP service logs to find the originating IP address. 3: Block the offending IP address. HOWEVER: Of greater importance is the following: 4. Why is the server not behind a firewall? 5. Why is some one trying to use the administrator account not throwing a huge gigantic red flag up for you? 6. Why do you not have a policy set to lock an account after so many bad password attempts? (Of course, this would cause your administrator account to become locked, but that is why question 5 came before this one.) John T eServices For You "Seek, and ye shall find!" > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Imail_Forum- > [EMAIL PROTECTED] On Behalf Of Greg Shepherd > Sent: Monday, April 03, 2006 12:09 PM > To: IMail Forum (E-mail) > Subject: [IMail Forum] OT - MSFTPSRV > > Under WINNT4.0 Server SP6a, I am getting bad or wrong password errors under > administrator for approx. 3 minutes per day. This server is on the public > side of CISCO PIX515E Firewall. This server runs Imail and my website. I > think somewhere some is attempting to break in. > > Can anyone tell me preferably off line, > > 1.) What potentially is going on? Good or Bad? > 2.) How Can I find who it is? > 3.) How to Block? > > Thanks for your assistance!!! > > Greg Shepherd > Catalyst Manufacturing Services, Inc > Test Engineering > 2507 Wayne Street > Endicott, New York 13760 > > Phone: 607-786-6300 x328 > Fax: 607-748-8557 > Email: [EMAIL PROTECTED] > > > > > ******************************************************************** > ******** > The contents of this email and any attachments may be privileged, > Confidential, and protected from disclosure. > It is intended only for the use of the individual to whom it > is addressed. Access to this email by anyone else is unauthorized. > If you are not the intended recipient, you are hereby notified that > any dissemination, distribution, or copying of this communication > is strictly prohibited. > If you received this communication in error, please notify us > immediately by replying to the message and deleting it from your computer. > > Additional assistance can be obtained by emailing > [EMAIL PROTECTED] > > Thank you. > ******************************************************************** > ******** > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
