Re: IRC ports open on NT4?

[m p <sumirati () yahoo de>]

Hi Phili,

take a look at 

http://grc.com/dos/grcdos.htm

It is a nice description about new flooding networks build by various people on
the net. And how they are used.

Just my 2 Cent

Marc



 --- "Philip J. Koenig" <pjklist () ekahuna com> schrieb: > Have some suspicious
stuff going on at a site and in my initial 
> investigation I went to an NT server there and typed 'netstat -an' to 
> see what was open, and found these curious entries:
>
> TCP   0.0.0.0:6666            0.0.0.0:0                       LISTENING
> TCP   0.0.0.0:6667            0.0.0.0:0                       LISTENING
> [...]
> TCP   127.0.0.1:6667          127.0.0.1:1043          ESTABLISHED
> TCP   127.0.0.1:6666          127.0.0.1:1043          ESTABLISHED
>
> That box runs the following services: Post.office (SMTP MTA), 
> Interscan Viruswall, Filemaker Pro Server, and PC Anywhere host.
>
> There is no IRC server on that box, and the Microsoft NNTP service is 
> not running.  Why would it be listening on IRC ports?
>
> Thanks,
>
>
> Phil
>
>
>
> --
> Philip J. Koenig                                       pjklist () ekahuna com
> Electric Kahuna Systems -- Computers & Communications for the New Millenium
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://www.nfr.com/mailman/listinfo/firewall-wizards 

__________________________________________________________________
Do You Yahoo!?
Gesendet von Yahoo! Mail - http://mail.yahoo.de
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards