Discussion Locked

question about system

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
how would know if some one has hack into your system if their any way you can by traceroute of ip address but what happy if the ip address do not show up then what yes i have one the best firewall zonealarm pro and second antivirus mcafee still need more secuirty my question is their a tool out mointor system some tried hack it yes or no

2 replies

by dmiles

n recent times, your greatest exposure to trouble comes from the internet on TCP ports familiar to you and previously considered reasonably safe. For example, a happenstance session from one of your subnet workstations with a web site run by malicious practitioners, or one infected by the same kind of people, can eventually destroy your entire network by opening up vulnerability doors. We suggest you brush up on browser technology and make certain that you are using the latest available e-mail client and browser for the type of system you run. You likely know already that its the simpler things that appear innocuous in their incipient stages that eventually expose you to network-wide intrusion.

Another simple tip, be sure to visit the Sans Institute at http://www.sans.org .

If you seek some free hacker/samarai (not cracker) tools, visit our downloads server here. You will find some good solid tools and handy scripts ranging from port scanners to packet sniffers to help you watch your favourite box for intruders and to develop a better understanding of what is happening on your networks.

An extensive array of Traceroute facilities is available here.

Click this link for extended Whois queries.

DNS / BIND (Berkeley Internet Name Domain) tools are here.

by joseph moore

There are steps to do.
You can enable Failed Login Attempts (and Successful ones also) in the Event Viewer Security log. YOu could then go over the logs and see what is in there, and if there are things in there that shouldn't be.

If it is a web server you are worried about, then check the web server logs. Apache and IIS both log connection information. You can check the logs to see if people are launching exploit attempts.

This discussion is closed to new replies.