Security Incidents mailing list archives
RE: Port 1975 rogue service
From: "Ashcraft, Brian S (Contractor)" <Brian.Ashcraft () dscc dla mil>
Date: Thu, 31 Oct 2002 17:29:44 -0500
Check this... http://www.dslreports.com/forum/remark,4242597~root=security,1~mode=flat -----Original Message----- From: WIlliam Kintz [mailto:bkintz () smtp aed org] Sent: Thursday, October 31, 2002 3:20 PM To: incidents () securityfocus com Subject: Port 1975 rogue service I have discovered a rogue service of some sort running on Port 1975 on one of my Win2000 boxes. Connecting to this port via a telnet gives me the below output. Anyone have any idea what this is? TIA, William J Kintz, CISSP, CCNA <begin screen capture> 220-A Fire_Fly_808 Production 220- 220- 220- 220- °ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ&# 9617;`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░ ;`░ñ°,╕_╕,°ñ░`░ñ°,╕_ ,°ñ░`░ñ° 220- 220- [ server time is 15:35:37 ] 220- [ server date is Thursday 31 October, 2002 ] 220- [ you are connecting from: XX.XX.XX.XX ] 220- 220- °ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ&# 9617;`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░ ;`░ñ°,╕_╕,°ñ░`░ñ°,╕_ ,°ñ░`░ñ° 220- 220- [ server stats ] 220- [ pubstro uptime: 4 Days, 13 Hours, 4 Mins ] 220- [ leechers 0ver the last 24 hours: 1699 ] 220- [ leechers logged in: 1783 ] 220- [ current leechers: 2 ] 220- [ kb leeched: 11550405 kb/s ] 220- [ kb filled: 4438567 kb/s ] 220- [ hdd freespace: 768.62 kb ] 220- [ Average Bandwith used: 40.719 ] 220- [ Current Bandwith in use: 16.500 ] 220- 220 °ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ&# 9617;`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░ ;`░ñ°,╕_╕,°ñ░`░ñ°,╕╕ ,°ñ░`░ñ° ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Port 1975 rogue service WIlliam Kintz (Oct 31)
- RE: Port 1975 rogue service John R. Hillman (Oct 31)
- <Possible follow-ups>
- RE: Port 1975 rogue service Ashcraft, Brian S (Contractor) (Oct 31)