Oh my god

We all had fun at work yesterday. Our main web server is IIS and anyone who has installed this will know that it will put on a default ftp site on to it. Now the muppets that go by the name of my company's hardware team just left it running without doing anything about it. Yesterday i had a quite moment, so I decided to clean up the web server. I came to the main data drive and was intriguied to why we only has 2GB left on a twenty gig drive. So there's me looking at the properties of each folder trying to work out where all this space has gone every thing was fine until I got to the Inetpub folder (main folder for IIS) and it was showing that it had 15gb woth of data in their. We've got quite a few hefty web sites in their but nothing that would take up 15gb worth of stuff. So I start going into each of the folders trying to find where it all is and come to the ftp folder. Some hacker group had found out that we have an unprotected ftp service and had started using our server as a download source for cracked movies. There was about 40 - 50 movies sitting there from house on the haunted hill to x-men the movie. So I have probably just pissed of some people as I deleted them all and shut down the ftp service.

it definatley wasn't my average day yesterday

Ian

i love days like that.

go on, admit it. You enjoyed yourself, tracking it down.

yeah I did enjoy tracking it down as they created loads of _VTC folder to make it llok like front page server extensions so that people wouldn't bother looking in there. but Iknow these tricks of the trade so it was elimentry my dear watson.

did you not fancy finding out who was coming in? rather than just shut it down straight away.

I had yo shut down on bosses instructions but I have two months worth of log files and a good anaylser to play with

cool, have fun.

spent a bit of my weekend going through those log files and it turned out 992 people had dowloaded in the last month with 5 people uploading 45 movies between them. the traffic mostly came from the states. got **** loads of ip addresses so I shall see what my boss say's and we might try to track them down, not that it would probably be much use

Ian

and if any of them are reading this ...

;-)

td.

I was halfway through downloading x-Men the movie and someone's gone and deleted the source!

Wait....

DOH!

LOL pansy

Quote:

---

So I have probably just pissed of some people as I deleted them all and shut down the ftp service.

---

Tell the truth, you deleted them but before doing so you secured a copy for your personal use, didn´t you? Com´on!

..........oops.hehehehehehehehehehe

So Ian this unprotected ftp....care to post the connection up, come on we have gigabytes of pictures of John and Mrs Le Pont which need a home.

lol.........yeah we have a couple of hackers who cruise around our unix box each night. Funny guys, you only have to rename something hcktls.exe and they immediatly down load it....gets really funny when you put together a few gigabytes which l am doing tonite and then closing our TCP/IP hole....damn that Emacs bug...we get it everytime we get a new version of the friggin thing.

I would have secured a few copires but my boss came in just as I found out and I had to be the honest employee

Ian finds out why bandwidth and space is taken up
Ian begins the process of burning a copy
boss walks in
Ian's brain is swearing every word under the sun whilst his voice is talking nicely about what he is found
Ian get congratulated whilst his brain is thinking that he really did want to see some of those movies
boss leaves
Ian start's punching anything that is in site and goes back to work

Problems with fire walls?

I think so yes, the above mentioned muppets don't know their arse from their elbow.


Ian