Hacked!

[Joe Ross]

ISS is the International Space Station, which is probably not what he meant.

IIS is Internet Information Services, and is Microsoft's Web/FTP server. Its security record has only recently been dwarfed by Internet Explorer's.

http://www.dgl.com/itinfo/2001/it010723.html

[Matt Krass]

IIS has a security record at all?

Seriously, a misconfigured (or unconfigured) IIS server is kind of like putting up a little sign that says "Free access, just need to know how to spell cmd.exe"

So does your server actually use IIS? (I'm sorry if that was mentioned and I missed it, little rushed) and also do you know how it was hacked? Many of the simpler and common exploits are patchable.

Also, do you have a firewall running to block off access to only the relevant ports? (80, perhaps 25/143 if it handles e-mail as well).

If you want more tips on securing a computer e-mail me or PM me.
matt AT zilla DOT pyroweb DOT us.

Bye all.

[Denman]

i dont know tbh, its not the stuff i know about

[Marc P.]

It does look like your host does use IIS. Just typing in the URL with a random page name afterwards is enough to tell you. The page returns:

HTTP 404 - File not found
Internet Information Services


That would bring up this question- is your site hosted and administered somewhere where you control the server, or are you paying a hosting company for webspace. If the former, a number of people in this thread have already indicated they would be happy to help you out in securing the server. If the later, I suggest you contact your host about the incident, and ask what methods they have in place to secure their servers.

[half geek]

I ma sorry to hear about the crack incident. What software or operating system was the server running? If it is UNIX or Linux, does your host offer SSH? Was a database available for crackers? Some server packages include the option of periodically backing up the entire thing or part of the server to a remote directory using SSH or SFTP.
Look into a UNIX-based server to take advantage of built-in SSH, SFTP, APACHE, etc.
If you need help, please email me at redfedora AT gmail DOT com