Clever Geek Handbook

Message on my server

I just logged into one of my servers and one of them took the message:

Mon Apr 17 13:42:11 UTC 2017: Data received from /xxx.xxx.xxx.xxx is ♥ + & Cookie: mstshash = hello

I also received the same message yesterday at 15:23 from the same ip. Iv had the same cookie sent from a different ip, so I was wondering what it was.

+3


source to share


1 answer


microsoft remote desktop - compromised Windows computers trying to connect to any remote desktop of the destination port (usually 3389) open on other machines.



+2


source






More articles:


All Articles