Security Basics mailing list archives

RE: Compromised Server Project

From: "Anthony, Shayla" <shayla () exchange cis pitt edu>
Date: Mon, 10 Feb 2003 14:53:27 -0500

I too got bored, and stuck a RC2 .net box out on my cable modem to 
see how quickly it got nabbed. I left FTP up with the same permissions
and it was compromised less than 12 hours later by similar means. 

I think in comparison to being on an *unknown* T1 and a known cable
provider IP range might be the major difference.

Shayla

Current thread:

Compromised Server Project Hunt, Jim (Feb 10)
- <Possible follow-ups>
- RE: Compromised Server Project Anthony, Shayla (Feb 10)
- RE: Compromised Server Project Shanna Daly (Feb 10)
  - irc port open on 6668/tcp and 6667/tcp Harish Gondavale (Feb 11)
    - Re: irc port open on 6668/tcp and 6667/tcp Mike Dresser (Feb 12)
- RE: Compromised Server Project Anders Reed Mohn (Feb 11)
  - RE: Compromised Server Project s7726 (Feb 12)
- Re: Compromised Server Project Brian Wojtczak ( Lawyers Online ) (Feb 12)