ISP Security, Win2k Box Defacement
I work at a isp, one of our win2k boxes was hacked(?) and defaced 3 times in the last week. This win2k box has been updated with latest security patches, and we are at a loss for words on what to do.
Description:
On each occation; logs have been erased, no trace as far as we know, we think the hackers(s) are getting access, and moving up 1 level in directory.
Wouold any one know of any brand new exploits ? Anybody have any suggestions ?
We did run a port probe from ( www.sheildsup.com / gnc.com ( i think ) We closed all open ports that nobody normally uses, this was 4 days ago, and 2 defacements since then.
jim
contact me for any reason: jimmiddleman32@hotmail.com
