[wplug] Govt. authority over crack attempts?

Jonathan S Billings billings at negate.org
Fri Sep 26 12:23:12 EDT 2003


On Fri, 2003-09-26 at 12:01, Alexandros Papadopoulos wrote:
...
> 
> Interesting ports on ipl-67-0168.pppoe.stargate.net (206.210.67.168):
> (The 1640 ports scanned but not shown below are in state: closed)
> PORT      STATE    SERVICE
> 21/tcp    open     ftp
> 22/tcp    open     ssh
> 25/tcp    open     smtp
> 79/tcp    open     finger
> 80/tcp    open     http
> 111/tcp   open     rpcbind
> 135/tcp   filtered msrpc
> 139/tcp   filtered netbios-ssn
> 445/tcp   filtered microsoft-ds
> 631/tcp   open     ipp
> 1024/tcp  open     kdm
> 4444/tcp  filtered krb524
> 5432/tcp  open     postgres
> 6000/tcp  open     X11
> 10000/tcp open     snet-sensor-mgmt
> 17300/tcp filtered kuang2
> 27374/tcp filtered subseven
> Device type: general purpose
> Running: Linux 2.4.X|2.5.X
> OS details: Linux Kernel 2.4.0 - 2.5.20
> Uptime 4.132 days (since Mon Sep 22 07:23:14 2003)

Whoops, subseven and kuang2 are both known trojans.  You've been
cracked, sir.

-- 
Jonathan S Billings <billings at negate.org>
TSFNKP, President and Chief Lackey




More information about the wplug mailing list