PDA

View Full Version : So, Oprano is running Port Scans....Why ?


sarettah
04-02-2004, 10:25 PM
http://www.sexeducatoon.com/portscan.jpg

??????

Mike AI
04-02-2004, 10:27 PM
Serge's hit bot going nuts again!!

I will get Gonzo or Bishop to look into this.

gonzo
04-02-2004, 10:33 PM
Bishop was telling me the same thing last week which he reset his stuff and it went away. Is it on the radio page? Or when you click?

sarettah
04-03-2004, 12:21 AM
Originally posted by gonzo@Apr 2 2004, 10:41 PM
Bishop was telling me the same thing last week which he reset his stuff and it went away. Is it on the radio page? Or when you click?
Neither of them that I am aware of.......


from: http://www.whitehats.com/cgi/arachNIDS/Sho...s144&view=event (http://www.whitehats.com/cgi/arachNIDS/Show?_id=ids144&view=event)

IDS144 "PROBE-FULL_XMAS_SCAN"
Platform(s): unix windows device
Category: scan
Classification: Information Gathering Attempt

This event indicates that an intruder is scanning your computer for available TCP services by sending "Xmas-tree" packets. These packets have the a sequence number of zero and the SYN, FIN, ACK, URG, PSH, and RST flags set. This packet should never be seen in normal TCP operation.

How Specific

This event is specific to a vulnerability, but may have been caused by any of several possible exploits. Packet payload is not considered in the signatures used to detect this attack.

Trusting The Source IP Address

Although this event was caused by a TCP packet, the packet is not thought to be a part of an existing TCP session. Therefor the source IP address could be easily forged. It has been noted that the intruder is likely to expect or desire a response to their packets, so it may be likely that the source IP address is not spoofed.

False Positives

There are reported incidents where legitimate traffic may cause an intrusion detection system to raise "false positive" alerts for this event.

The following details have been reported:

With the ack set to zero, and these options, the packet is almost guaranteed to not occur naturally.

sarettah
04-03-2004, 12:53 AM
Originally posted by Mike AI@Apr 2 2004, 10:35 PM
I will get Gonzo or Bishop to look into this.
Mike,

you got mail.

Winetalk.com
04-03-2004, 01:19 AM
Originally posted by Mike AI@Apr 2 2004, 10:35 PM
Serge's hit bot going nuts again!!

I will get Gonzo or Bishop to look into this.
Sarretah, that was a special software we installed.

Everybody who listened to that show now has their PC's transmitting data directly to IRS.

to remove it,
call
1-900-collect

Dravyk
04-03-2004, 03:51 AM
Originally posted by sarettah@Apr 3 2004, 12:29 AM
by sending "Xmas-tree" packets.
Sending out Xmas packages this time of year is just all wrong!

I think it was supposed to be sending seder meals and Easter baskets though, according to what Gonzo told me.

montel
04-03-2004, 04:31 AM
hmmmm. professor? :rokk:

gonzo
04-03-2004, 06:06 AM
Originally posted by Dravyk+Apr 3 2004, 03:59 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Dravyk @ Apr 3 2004, 03:59 AM)</td></tr><tr><td id='QUOTE'><!--QuoteBegin--sarettah@Apr 3 2004, 12:29 AM
by sending "Xmas-tree" packets.
Sending out Xmas packages this time of year is just all wrong!

I think it was supposed to be sending seder meals and Easter baskets though, according to what Gonzo told me.[/b][/quote]
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.

sarettah
04-03-2004, 08:48 AM
Originally posted by gonzo@Apr 3 2004, 06:14 AM
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.
And the radio show playing on April 2nd was ???

That answer makes sense on Tuesday, but does not make sense on Friday....

theduderocks
04-03-2004, 08:59 AM
Originally posted by gonzo+Apr 3 2004, 03:14 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (gonzo @ Apr 3 2004, 03:14 AM)</td></tr><tr><td id='QUOTE'>Originally posted by -Dravyk@Apr 3 2004, 03:59 AM
<!--QuoteBegin--sarettah@Apr 3 2004, 12:29 AM
by sending "Xmas-tree" packets.
Sending out Xmas packages this time of year is just all wrong!

I think it was supposed to be sending seder meals and Easter baskets though, according to what Gonzo told me.
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.[/b][/quote]
You guys seem to be dancing as fast as you can on this one. Better get your stories straight. What is it?

masterp74
04-03-2004, 09:06 AM
Originally posted by theduderocks+Apr 3 2004, 06:07 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (theduderocks @ Apr 3 2004, 06:07 AM)</td></tr><tr><td id='QUOTE'>Originally posted by -gonzo@Apr 3 2004, 03:14 AM
Originally posted by -Dravyk@Apr 3 2004, 03:59 AM
<!--QuoteBegin--sarettah@Apr 3 2004, 12:29 AM
by sending "Xmas-tree" packets.
Sending out Xmas packages this time of year is just all wrong!

I think it was supposed to be sending seder meals and Easter baskets though, according to what Gonzo told me.
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.
You guys seem to be dancing as fast as you can on this one. Better get your stories straight. What is it?[/b][/quote]
how many inches of cock can you fit in your mouth?




I'm guessing 9'

theduderocks
04-03-2004, 09:07 AM
Originally posted by masterp74+Apr 3 2004, 06:14 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (masterp74 @ Apr 3 2004, 06:14 AM)</td></tr><tr><td id='QUOTE'>Originally posted by -theduderocks@Apr 3 2004, 06:07 AM
Originally posted by -gonzo@Apr 3 2004, 03:14 AM
Originally posted by -Dravyk@Apr 3 2004, 03:59 AM
<!--QuoteBegin--sarettah@Apr 3 2004, 12:29 AM
by sending "Xmas-tree" packets.
Sending out Xmas packages this time of year is just all wrong!

I think it was supposed to be sending seder meals and Easter baskets though, according to what Gonzo told me.
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.
You guys seem to be dancing as fast as you can on this one. Better get your stories straight. What is it?
how many inches of cock can you fit in your mouth?




I'm guessing 9'[/b][/quote]
never tried, masterbater....you?

masterp74
04-03-2004, 09:12 AM
Originally posted by theduderocks+Apr 3 2004, 06:15 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (theduderocks @ Apr 3 2004, 06:15 AM)</td></tr><tr><td id='QUOTE'>Originally posted by -masterp74@Apr 3 2004, 06:14 AM
Originally posted by -theduderocks@Apr 3 2004, 06:07 AM
Originally posted by -gonzo@Apr 3 2004, 03:14 AM
Originally posted by -Dravyk@Apr 3 2004, 03:59 AM
<!--QuoteBegin--sarettah@Apr 3 2004, 12:29 AM
by sending "Xmas-tree" packets.
Sending out Xmas packages this time of year is just all wrong!

I think it was supposed to be sending seder meals and Easter baskets though, according to what Gonzo told me.
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.
You guys seem to be dancing as fast as you can on this one. Better get your stories straight. What is it?
how many inches of cock can you fit in your mouth?




I'm guessing 9'
never tried, masterbater....you?[/b][/quote]
12'








how about in your ass?




I'm guessing 7'

theduderocks
04-03-2004, 09:15 AM
Originally posted by masterp74+Apr 3 2004, 06:20 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (masterp74 @ Apr 3 2004, 06:20 AM)</td></tr><tr><td id='QUOTE'>Originally posted by -theduderocks@Apr 3 2004, 06:15 AM
Originally posted by -masterp74@Apr 3 2004, 06:14 AM
Originally posted by -theduderocks@Apr 3 2004, 06:07 AM
Originally posted by -gonzo@Apr 3 2004, 03:14 AM
Originally posted by -Dravyk@Apr 3 2004, 03:59 AM
<!--QuoteBegin--sarettah@Apr 3 2004, 12:29 AM
by sending "Xmas-tree" packets.
Sending out Xmas packages this time of year is just all wrong!

I think it was supposed to be sending seder meals and Easter baskets though, according to what Gonzo told me.
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.
You guys seem to be dancing as fast as you can on this one. Better get your stories straight. What is it?
how many inches of cock can you fit in your mouth?




I'm guessing 9'
never tried, masterbater....you?
12'








how about in your ass?




I'm guessing 7'[/b][/quote]
good for you. A valuable skilll in our business.

sarettah
04-03-2004, 09:57 AM
Hey, you guys want to take your comparisons of how much dick you can take to an appropriate thread ???

One of Nick's or Ant's should do quite nicely, thank you.

:okthumb:

masterp74
04-03-2004, 10:08 AM
Originally posted by sarettah@Apr 3 2004, 07:05 AM
Hey, you guys want to take your comparisons of how much dick you can take to an appropriate thread ???

One of Nick's or Ant's should do quite nicely, thank you.

:okthumb:
Bruce Wayne and Robin are busy this weekend.





I'll change the subject.


What's your favorite Motley Crue song and Why?




my fav is Shout At The Devil :matey:



Last edited by masterp74 at Apr 3 2004, 07:17 AM

sarettah
04-03-2004, 10:48 AM
Originally posted by masterp74@Apr 3 2004, 10:16 AM
What's your favorite Motley Crue song and Why?

No, the subject is"Oprano is running port scans....why?" (It's easy to tell the subject most of the time because it is at the top of the thread, you know the thing you clicked on to read this)

If you want a Motley Crue thread, start one.... It's easy, you go to the top of the page and hit the little button that says "New Topic", then fill in the box....

Get IT ? Got IT ? Good...... :okthumb:

gonzo
04-03-2004, 12:06 PM
Originally posted by sarettah+Apr 3 2004, 08:56 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (sarettah @ Apr 3 2004, 08:56 AM)</td></tr><tr><td id='QUOTE'><!--QuoteBegin--gonzo@Apr 3 2004, 06:14 AM
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.
And the radio show playing on April 2nd was ???

That answer makes sense on Tuesday, but does not make sense on Friday....[/b][/quote]
Actually that was a lefthanded smart assed comment which I wont go into.
All Ive installed over there is a little HTML and a few images. Anything else thats going on with port scanning etc I dont know about.

So much for any dancing.

theduderocks
04-03-2004, 12:38 PM
Originally posted by gonzo+Apr 3 2004, 09:14 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (gonzo @ Apr 3 2004, 09:14 AM)</td></tr><tr><td id='QUOTE'>Originally posted by -sarettah@Apr 3 2004, 08:56 AM
<!--QuoteBegin--gonzo@Apr 3 2004, 06:14 AM
This just in... we installed that to make sure your WinAmp port was open and could get the radio feed.
And the radio show playing on April 2nd was ???

That answer makes sense on Tuesday, but does not make sense on Friday....
Actually that was a lefthanded smart assed comment which I wont go into.
All Ive installed over there is a little HTML and a few images. Anything else thats going on with port scanning etc I dont know about.

So much for any dancing.[/b][/quote]
Thanks for the Rhumba, dude. You can really cut a rug.

masterp74
04-03-2004, 02:25 PM
Originally posted by sarettah+Apr 3 2004, 07:56 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (sarettah @ Apr 3 2004, 07:56 AM)</td></tr><tr><td id='QUOTE'><!--QuoteBegin--masterp74@Apr 3 2004, 10:16 AM
What's your favorite Motley Crue song and Why?

No, the subject is"Oprano is running port scans....why?" (It's easy to tell the subject most of the time because it is at the top of the thread, you know the thing you clicked on to read this)

If you want a Motley Crue thread, start one.... It's easy, you go to the top of the page and hit the little button that says "New Topic", then fill in the box....

Get IT ? Got IT ? Good...... :okthumb:[/b][/quote]
No, I don't get it, got it, good. fuck you. I post what I want, whenever I want.

sarettah
04-03-2004, 03:55 PM
Originally posted by masterp74@Apr 3 2004, 02:33 PM
No, I don't get it, got it, good. fuck you. I post what I want, whenever I want.
And I will be sure to return the favor................... :awinky: