Which I would do, immediately, if I could see the originating IP(s). -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fitscape.com Internet Relations Sent: Friday, June 13, 2003 6:08 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd
Ok that sux. The least u could do is alert the upstream provider and/or owner of the IP and see where that road takes u. Bryan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Katie La Salle-Lowery Sent: Friday, June 13, 2003 5:00 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Some of the posters on bbs's about this topic are as recent today. If misery loves company I should be in heaven--I do have plenty of company. Hate to confess, but I don't have a firewall so I can't block IP's. ~Katie -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fitscape.com Internet Relations Sent: Friday, June 13, 2003 5:58 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Yeah welcome to the club. I imagine the articles ur seeing are rather old as well. Best bet would be to use a sniffer and grab the IP's these attacks are coming from and block them. Those NT boxes are going to be real targets. Bryan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Katie La Salle-Lowery Sent: Friday, June 13, 2003 4:50 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Yep, it does. Win2k domain with some NT TSE members. I've found articles with lots of people with the same problem but no solutions. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fitscape.com Internet Relations Sent: Friday, June 13, 2003 5:46 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Sounds like ur getting hacked Katie. Are these NT or Win2K boxes or what? Bryan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Katie La Salle-Lowery Sent: Friday, June 13, 2003 4:33 PM To: [EMAIL PROTECTED] Subject: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Hi All, Just cuz you're such an broadly experienced group I'm going to pose my problem of the day: My User Accounts (Windows network) are getting locked out en masse. Event viewer shows failed login attempts using process ksecdd. I'm Googling my little heart out but if anyone in this knowledgable group has any insight, I'd be in their debt. Thanks, Katie To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
