Were you ever under attack?

Yes. I was furious that MS leaves your system wide open to attack/hack upon doing a new install. My reaction was to disconnect from the net, wipe my system clean, redo install with system disconnected from net, install firewall under strict access rules, install Adaware and scan for the notorious MS cookies that hackers exploit and remove them!, Added autorun script to prevent MS from accessing net in background since this also is security hole for hackers, installed Anti-Virus software, connected to net immediately uploaded new patches for anti-vir and firewall.
Made opera my default browser and rejected windows update from upgrading my Iexplorer as IE 6 and above are a total waste 1) They are so full of security holes it's rediculous, 2) They use way too much system resources for what they give, 3) Opera is much safer and faster/reconfigurable.

Hope this helps
rick

We all get attacked every day!
I look at your server logs (web servers, specifically) and I see attack attempts all the time. I still see CodeRed probe attacks every day! There's gonna be WebDAV scan attacks, IIS-tailored attacks (.ida scans, SCRIPTS attacks, etc.).
Our corporate firewalls have been attacked pretty hard a couple of times in the past couple of years. No major DoS attacks, though, but definately some disruptions.
This is just par for the course nowadays.

You just need to stay up on your logs and monitoring devices. Make sure you monitor bandwidth to detect if a DoS begins. Monitor your web servers in case a page defacement (I haven't had one yet, knock on wood!) happens. Run antivirus on everything. Test firewall policies from the Internet to make sure everything that should be closed IS closed.

Basically, be dilligent, and monitor everything! If anything comes up, notify people IMMEDIATELY, and take action IMMEDIATELY! Have the phone numbers for your ISP in your cell phone's phonebook.

Many times the hacker/attacker launches there attack after vulnerabilities have been discovered on your network, but during the time when network activity is very low. Most the time this is when your not around. Yes, I have encountered a direct attack. My approach was direct out-right confrontation, which involves quick and decisive decisions about stopping processes, and locking down specific areas. Most of all locking down the firewall. You must try to preserve the logs and records from where he launched his attack. You gain a mental picture of what he was looking for and how he was intending on using the files or information. This will help you secure the box against further attack and ward off the attacker. BEWARE, a attacker when trapped will use all means to erase or destroy information in his path to cover his tracks. He will use Malware, trojans, pre-assembled scripts to trash your computer if possible. Your best bet is to not let a hacker in your box at all. Turn off all unused processes and close unused ports, strengthen firewall restrictions. Check iplogs as often as possible for patterns of useage.

This question was closed by the author