[wplug] Govt. authority over crack attempts?

Jonathan S Billings billings at negate.org
Fri Sep 26 12:34:02 EDT 2003


On Fri, 2003-09-26 at 12:27, John Harrold wrote:
> Sometime in September Jonathan S Billings assaulted the keyboard and produced:
> 
> | > 135/tcp   filtered msrpc
> | > 139/tcp   filtered netbios-ssn
> | > 445/tcp   filtered microsoft-ds
> | > 631/tcp   open     ipp
> | > 17300/tcp filtered kuang2
> | > 27374/tcp filtered subseven
> | > Device type: general purpose
> | > Running: Linux 2.4.X|2.5.X
> | > OS details: Linux Kernel 2.4.0 - 2.5.20
> | > Uptime 4.132 days (since Mon Sep 22 07:23:14 2003)
> | 
> | Whoops, subseven and kuang2 are both known trojans.  You've been
> | cracked, sir.
> 
> i think those are filtered by his isp, so they show up in the scan, but it
> doesn't necessarily mean they are present on his system right? just like
> he's probably not running any ms services like those listed above.

You are probably right, I saw the 'kuang2' and 'subseven' pop out, and
immediately thought it was 'open' without really looking too closely.

My bad.  Sorry about that.

-- 
Jonathan S Billings <billings at negate.org>
TSFNKP, President and Chief Lackey




More information about the wplug mailing list