RE: Port 1975 rogue service

From: John R. Hillman (johnat_private)
Date: Thu Oct 31 2002 - 13:40:48 PST

Next message: Ashcraft, Brian S (Contractor): "RE: Port 1975 rogue service"

Previous message: WIlliam Kintz: "Port 1975 rogue service"
In reply to: WIlliam Kintz: "Port 1975 rogue service"
Next in thread: Ashcraft, Brian S (Contractor): "RE: Port 1975 rogue service"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> I have discovered a rogue service of some sort running
> on Port 1975 on one of my Win2000 boxes. Connecting to
> this port via a telnet gives me the below output.
> Anyone have any idea what this is?

Go!zilla used to run on port 1975, IIRC.

<snipped>

> 220-             [ leechers 0ver the last 24 hours: 1699  ]
> 220-             [ leechers logged in: 1783  ]
> 220-             [ current leechers: 2  ]
> 220-             [ kb leeched: 11550405 kb/s  ]
> 220-             [ kb filled: 4438567 kb/s  ]
> 220-             [ hdd freespace: 768.62 kb  ]
> 220-             [ Average Bandwith used: 40.719  ]
> 220-             [ Current Bandwith in use: 16.500  ]

Leechers, eh?  You're not serving an anonymous warez FTP there are you?  At
least, that was the first thing that sprang to mind.

J


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Ashcraft, Brian S (Contractor): "RE: Port 1975 rogue service"
Previous message: WIlliam Kintz: "Port 1975 rogue service"
In reply to: WIlliam Kintz: "Port 1975 rogue service"
Next in thread: Ashcraft, Brian S (Contractor): "RE: Port 1975 rogue service"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Oct 31 2002 - 15:13:59 PST