Kill the VNC server on all the machines that you can find and run this Java
program instead:
import java.net.ServerSocket;
import java.net.Socket;
import java.io.IOException;
import java.util.Date;
public class CatchIP {
public static void main(final String args[]) throws IOException {
final ServerSocket server = new ServerSocket(5900);
while (true) {
try {
final Socket socket = server.accept();
System.out.println("Connection attempted from"
+socket.getInetAddress().toString() + " at " + new Date());
socket.close();
}
catch (final IOException e) {
System.out.println("Exception: " + e);
}
}
}
}
It will log any attempt to connect to port 5900 with the IP address of the
attacker and the date and time.
This listt doesn't allow attachments so I will send tou the source and the
class file off list.
John Wilson
The Wilson Partnership
5 Market Hill, Whitchurch, Aylesbury, Bucks HP22 4JB, UK
+44 1296 641072, +44 7976 611010(mobile), +44 1296 641874(fax)
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: 08 December 2000 22:26
Subject: Re: Urgent help needed to solve security breech
> > Someone has installed VNC on several, student owned,
> > computers in our Residence Halls without the owner's
> > permission or knowledge. These computers are being
> > remotely controlled without the owner's permission.
>
> Thank you all for your assistance. I have several good
> ideas and should be able to shut this fool down.
>
> Thank you
>
> --
> Robert W. Downard
> Technical Services Manager email: [EMAIL PROTECTED]
> St. Norbert College Phone: (920) 403-3971
> 100 Grant Street Fax: (920) 403-4084
> De Pere, WI 54115-2099
> ---------------------------------------------------------------------
> To unsubscribe, send a message with the line: unsubscribe vnc-list
> to [EMAIL PROTECTED]
> See also: http://www.uk.research.att.com/vnc/intouch.html
> ---------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------
