|
Home > Archive > IIS Server Security > July 2004 > Re: Am I hacked? IIS dying, 'telnet localhost 443' gives: Hallo,
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Re: Am I hacked? IIS dying, 'telnet localhost 443' gives: Hallo,
|
|
| Steve 2004-07-09, 12:01 pm |
| Hi Hal.
I am having the same problem you are. I have a server running IIS and I
can't browse to port 443 using SSL anymore. It just started yesterday.
I've been trying everything I can think of to get it going with no
success. When I try to telnet the server using port 443 I get the same
message you were getting that says 'Hallo, Wilkommen auf Compactzone
Stro!'. Have you found a way to resolve this issue yet? I can't seem
to find an answer anywhere. Any help you can give would be GREATLY
appreciated. If you don't have a solution yet and I can somehow figure
out how to resolve this thing I will be sure to let you know.
Thanks,
Steve
hal@nospam.com wrote:
> I posted yesterday about my IIS dying. Original post is below.
> General consensus and mosts docs on the 115 error say something is
> listening on my http/https ports, however, netstat does not show
> anything. I am checking into third party utilities to get more info,
> but I found something very disturbing: My favorite trick for seeing
> if SMTP servers are running is 'telnet <host> 25' to see if server
> responds. I did this for port 80 and 443, and even when web service
> is stopped, I get a response on 443 that says:
>
> Hallo, Willkommen auf Compactzone Stro!
> Ich hoffe, Sie haben viel SpaŻ!
> Loader
>
> Danke fnr ihren Besuch!
> Bist zum nSchsten Mal!
> Loader
>
> This cannot be good. How can I find what this is and get rid of it?
>
> Any help _greatly_ appreciated
>
> Hal
>
> -----------------------------------------------------------------------------------------------------
> Something happened to my Exchange server over the weekend that caused
> a crash (nothing logged) and upon startup my IIS is failing with Event
> ID 115 (Service could not bind instance 1). This error is logged for
> both MSFTPSVC and W3SVC. All services seem to be running but OWA
> access to either port 80 or 443 gets a page cannot be displayed error.
> The access attempt is responded to with an account login and the logs
> show the access attempt. I am running a certificate, and a port
> redirection from port 80. Most docs I have found on this refer to
> running multiple instances which I do not have. My securebindings in
> metabase is correct. I have no other instances of either FTP or
> W3SVC. This behaves exactly the same either on reboot or IIS Admin
> restart. I have tried disabling SSL by removing port listener in
> default web site properties and service behaves exactly the same so it
> doesn't seem to be an SSL related problem.
>
> Any suggestions greatly appreciated.
>
> thanks
>
> Hal
|
|
|
|
|