Re: Hacked? IP address changes in Event Log?
From: Scott Harding - MS MVP (scrockel_at_**NO_SPAM**hotmail.com)
Date: 08/04/04
- Next message: githeko \(delete\) _at_egerton.ac.ke: "RAS in Win2003 can't save port info"
- Previous message: Miha Pihler: "Re: Authenticate between workgroup servers"
- In reply to: Phillip Windell: "Re: Hacked? IP address changes in Event Log?"
- Next in thread: Phillip Windell: "Re: Hacked? IP address changes in Event Log?"
- Reply: Phillip Windell: "Re: Hacked? IP address changes in Event Log?"
- Reply: Ole Kristian Bangås: "Re: Hacked? IP address changes in Event Log?"
- Reply: Roland Hall: "Re: Hacked? IP address changes in Event Log?"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 4 Aug 2004 09:21:54 -0700
The 169 address space is reserver for AIPA. Automatic Ip addressing. If a
machine is set to DHCP but cannot locate a DHCP server it will assign itself
a 169. something address.
-- Scott Harding MCSE, MCSA, A+, Network+ Microsoft MVP - Windows NT Server "Phillip Windell" <@.> wrote in message news:%23eYEAojeEHA.2396@TK2MSFTNGP11.phx.gbl... > <anonymous@discussions.microsoft.com> wrote in message > news:c3ea01c47a36$a9de3030$a401280a@phx.gbl... > > So I guess the answer must be 'NO'. The event log doesn't > > track who changed the network configs when and from where??? > > > > Then all I can say is what a huge gaping oversight in lack > > of security design that presents. You'd think that > > tracking/auditing any changes in the network configs should > > be deemed absolutely crucial to minimal fundamental system > > security. > > No,.... with minimal fundemental security it wouldn't have happen to begin > with. Minimal fundemental security includes keeping servers in a locked > room and not letting anyone else know the admin credentials. As I indicated > in my other post,..I think this was done by someone who didn't know what > they were doing by physically sitting at the machine itself and doing it > manually. > > -- > > Phillip Windell [MCP, MVP, CCNA] > www.wandtv.com > >
- Next message: githeko \(delete\) _at_egerton.ac.ke: "RAS in Win2003 can't save port info"
- Previous message: Miha Pihler: "Re: Authenticate between workgroup servers"
- In reply to: Phillip Windell: "Re: Hacked? IP address changes in Event Log?"
- Next in thread: Phillip Windell: "Re: Hacked? IP address changes in Event Log?"
- Reply: Phillip Windell: "Re: Hacked? IP address changes in Event Log?"
- Reply: Ole Kristian Bangås: "Re: Hacked? IP address changes in Event Log?"
- Reply: Roland Hall: "Re: Hacked? IP address changes in Event Log?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|