('binary' encoding is not supported, stored as-is) I have discovered a rogue service of some sort running on Port 1975 on one of my Win2000 boxes. Connecting to this port via a telnet gives me the below output. Anyone have any idea what this is? TIA, William J Kintz, CISSP, CCNA <begin screen capture> 220-A Fire_Fly_808 Production 220- 220- 220- 220- °ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_ ,°ñ░`░ñ° 220- 220- [ server time is 15:35:37 ] 220- [ server date is Thursday 31 October, 2002 ] 220- [ you are connecting from: XX.XX.XX.XX ] 220- 220- °ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_ ,°ñ░`░ñ° 220- 220- [ server stats ] 220- [ pubstro uptime: 4 Days, 13 Hours, 4 Mins ] 220- [ leechers 0ver the last 24 hours: 1699 ] 220- [ leechers logged in: 1783 ] 220- [ current leechers: 2 ] 220- [ kb leeched: 11550405 kb/s ] 220- [ kb filled: 4438567 kb/s ] 220- [ hdd freespace: 768.62 kb ] 220- [ Average Bandwith used: 40.719 ] 220- [ Current Bandwith in use: 16.500 ] 220- 220 °ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕_╕,°ñ░`░ñ°,╕╕ ,°ñ░`░ñ° ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Thu Oct 31 2002 - 13:38:45 PST