🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Thread View: pl.internet.mordplik
7 messages
7 total messages Started by Ryszard Rączkowski Sun, 21 Mar 2004 02:40
cw150.internetdsl.tpnet.pl robi za open-relay
#517
Author: Ryszard Rączkowski
Date: Sun, 21 Mar 2004 02:40
47 lines
2846 bytes
Niestety w Ripie brak telefonu do tej firmy, bo chętnie i życzliwie bym
wyjaśnił, jaki problem i co może dla nich to oznaczać.
Jestem mocno przekonany, że spam relayowany jest bezwiednie, na skutek
dziury w jakimś sendmailu czy czymś innym, zatem powinni natychmiast
ściągnąć jakiegoś lepszego informatyka.

*****

Received: by matrix01b.home.net.pl (mbox warschau.post)
 (with Cubic Circle's cucipop (v1.31 1998/05/13) Sun Mar 21 01:49:52 2004)
X-From_: sierra_t...@xs4all.nl Sun Mar 21 01:36:56 2004
Received: from cw150.internetdsl.tpnet.pl (HELO xs4all.nl) (80.53.232.150)
  by matrix01b.home.net.pl with SMTP; 21 Mar 2004 00:36:55 -0000
Message-ID: <9d3d01c40edc$df1a6ec2$0289...@xs4all.nl>
From: "Sierra Thomas" <sierra_t...@xs4all.nl>
Subject: 5 hot dvds for a buck
Date: Sun, 21 Mar 2004 00:36:59 +0000
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 7bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<p>Five sizzling hot adult DVDs for just one buck<br>
<p><a
href="http://www.luhmvmdmhueqqd.tvmwhbtmlg.ymknrpubtil.fpnpmvcgazv.comazmdg
hbodsdmmhref=www.ioqqwvdvtkdfqhkkdfycylwc.rtxdzzdsqijfhqlcncdmq.ydvowoshqth
bdexfbiehblbdx.enusheb.com/dvds2/?www.tvqpfzdbrapnpdqlkcbccujqthqb.crrvetcw
fscbixxvmpbxoc.qdsfestnnujkcepxhzdpjtc.tlsyundlffgadcyjxfdgbssxa">Pick
yours</a></p>
  <br>
<br>
  <a
href="http://www.yprcmkbxedbx.tprcfscqixchyn.umgxgicoefq.ocgrfvdsosifxb.com
bckobrcshghref=www.kawnzadatwmjvvcizgszbogihsg.fptumhbmnhwqbhocbnpdgwamh.il
ifcucqhwnshsjxcptwvegd.enusheb.com/xen.php?www.ghqlqldllhdujpgvkukckjuqnxd.
pvxuebsbecgwdayjkitcymql.uveklkgztqyrbgkloaxsdiod.izbunqdqrwmeoawajukbgafgi
ec">no more</a> </p>
<p>eVV79H2ca2AwbwW95QM</p>
<p>qunhgmcvmtqhk khcumocumnqylb npxjuybyqh</p>
</body>
</html>
Re: cw150.internetdsl.tpnet.pl robi za open-relay
#518
Author: Przemyslaw Popielarski
Date: Sun, 21 Mar 2004 02:56
19 lines
1605 bytes
Ryszard Rączkowski wrote:
> Niestety w Ripie brak telefonu do tej firmy, bo chętnie i życzliwie
> bym wyjaśnił, jaki problem i co może dla nich to oznaczać.
> Jestem mocno przekonany, że spam relayowany jest bezwiednie, na skutek
> dziury w jakimś sendmailu czy czymś innym, zatem powinni natychmiast
> ściągnąć jakiegoś lepszego informatyka.

Siakos nie moge od nich sobie pospamowowac:

Interesting ports on cw150.internetdsl.tpnet.pl (80.53.232.150):
135/tcp
139/tcp    open        netbios-ssn
445/tcp    open        microsoft-ds
1025/tcp   open        NFS-or-IIS

-- 
./ premax
./ premax@hot,pl
./ koniec i bomba, a kto czytal ten traba. w.g.
Re: cw150.internetdsl.tpnet.pl robi za open-relay
#519
Author: Dominik Rathann Mierzejewski
Date: Sun, 21 Mar 2004 09:50
28 lines
2451 bytes
Date: Sun, 21 Mar 2004 03:56:16 +0100
From: Przemyslaw Popielarski
> Ryszard Rączkowski wrote:
>> Niestety w Ripie brak telefonu do tej firmy, bo chętnie i życzliwie
>> bym wyjaśnił, jaki problem i co może dla nich to oznaczać.
>> Jestem mocno przekonany, że spam relayowany jest bezwiednie, na skutek
>> dziury w jakimś sendmailu czy czymś innym, zatem powinni natychmiast
>> ściągnąć jakiegoś lepszego informatyka.

> Siakos nie moge od nich sobie pospamowowac:

> Interesting ports on cw150.internetdsl.tpnet.pl (80.53.232.150):
> 135/tcp
> 139/tcp    open        netbios-ssn
> 445/tcp    open        microsoft-ds
> 1025/tcp   open        NFS-or-IIS

Bo to jest open-proxy:
80.53.232.150 RBL filtered by dnsbl.njabl.org: open proxy -- 1077362403
80.53.232.150 RBL filtered by xbl.spamhaus.org: http://www.spamhaus.org/query/bl?ip=80.53.232.150
80.53.232.150 RBL filtered by list.dsbl.org: http://dsbl.org/listing?ip=80.53.232.150
80.53.232.150 RBL filtered by dnsbl.sorbs.net: HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=80.53.232.150
80.53.232.150 RBL filtered by opm.blitzed.org: open proxy - see http://opm.blitzed.org/?ip=80.53.232.150

-- 
RRBL: http://rbl.rangers.eu.org/
"Junk mail is war. RFCs do not apply."
        -- Wietse Venema in postfix-users
Re: cw150.internetdsl.tpnet.pl robi za open-relay
#520
Author: Tomasz Nidecki
Date: Sun, 21 Mar 2004 10:48
34 lines
3052 bytes
Dominik 'Rathann' Mierzejewski <domini...@usenet.rangers.eu.org>
wrote in news:c3joi2$31d$2...@debi.pekin.net.pl: 

> Bo to jest open-proxy:
> 80.53.232.150 RBL filtered by dnsbl.njabl.org: open proxy --
> 1077362403 80.53.232.150 RBL filtered by xbl.spamhaus.org:
> http://www.spamhaus.org/query/bl?ip=80.53.232.150 80.53.232.150 RBL
> filtered by list.dsbl.org: http://dsbl.org/listing?ip=80.53.232.150 
> 80.53.232.150 RBL filtered by dnsbl.sorbs.net: HTTP Proxy See:
> http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=80.53.232.150 
> 80.53.232.150 RBL filtered by opm.blitzed.org: open proxy - see
> http://opm.blitzed.org/?ip=80.53.232.150 

$ pxytest 80.53.232.150
Using mail server: x.x.x.x (x.x)
Testing addr "80.53.232.150" port "80" proto "http-connect" ... cannot connect
Testing addr "80.53.232.150" port "80" proto "http-post" ... cannot connect
Testing addr "80.53.232.150" port "3128" proto "http-connect" ... cannot connect
Testing addr "80.53.232.150" port "8080" proto "http-connect" ... cannot connect
Testing addr "80.53.232.150" port "8080" proto "http-post" ... cannot connect
Testing addr "80.53.232.150" port "8081" proto "http-connect" ... cannot connect
Testing addr "80.53.232.150" port "1080" proto "socks4" ... connected
>>> binary message: 4 1 0 25 80 55 8 210 0
<<< binary message: 0 90 0 0 0 0 0 0
socks reply code = 90 (request granted)
<<< 220 x.x ESMTP\r\n
*** ALERT - open proxy detected
Test complete - identified open proxy 80.53.232.150:1080/socks4

-- 
tomasz 'tonid' nidecki, zoliborz, warszawa, poland
to...@tonid.net http://tonid.net http://endemic.org
jabber: to...@tonid.net registered linux user #308829
zestaw skryptow QoS - patrz: http://endemic.org/htb
Re: cw150.internetdsl.tpnet.pl robi za open-relay
#522
Author: Przemyslaw Popielarski
Date: Sun, 21 Mar 2004 13:29
10 lines
1322 bytes
Tomasz Nidecki wrote:
> Test complete - identified open proxy 80.53.232.150:1080/socks4

Jak to jest, ze ani nmap nie identyfikuje portu 1080 jako otwartego, ani
telnet 80.53.232.150 1080 nic nie daje?

-- 
./ premax
./ premax@hot,pl
./ koniec i bomba, a kto czytal ten traba. w.g.
Re: cw150.internetdsl.tpnet.pl robi za open-relay
#521
Author: Tomasz Nidecki
Date: Sun, 21 Mar 2004 13:46
15 lines
1857 bytes
"Przemyslaw Popielarski" <pre...@hot.pl> wrote in
news:405d988c$1...@news.home.net.pl: 

>> Test complete - identified open proxy 80.53.232.150:1080/socks4
> 
> Jak to jest, ze ani nmap nie identyfikuje portu 1080 jako otwartego,
> ani telnet 80.53.232.150 1080 nic nie daje?

A nie mam pojecia, SOA#1...

-- 
tomasz 'tonid' nidecki, zoliborz, warszawa, poland
to...@tonid.net http://tonid.net http://endemic.org
jabber: to...@tonid.net registered linux user #308829
zestaw skryptow QoS - patrz: http://endemic.org/htb
Re: cw150.internetdsl.tpnet.pl robi za open-relay
#523
Author: Przemyslaw Popielarski
Date: Sun, 21 Mar 2004 13:54
22 lines
1748 bytes
Tomasz Nidecki wrote:
>>> Test complete - identified open proxy 80.53.232.150:1080/socks4
>> 
>> Jak to jest, ze ani nmap nie identyfikuje portu 1080 jako otwartego,
>> ani telnet 80.53.232.150 1080 nic nie daje?
> 
> A nie mam pojecia, SOA#1...

Rzeczywiscie, jakos kulawo go badalem :)

Port       State       Service
135/tcp    open        loc-srv                 
139/tcp    open        netbios-ssn             
445/tcp    open        microsoft-ds            
1025/tcp   open        NFS-or-IIS              
1080/tcp   open        socks                   
1550/tcp   open        3m-image-lm 

-- 
./ premax 
./ premax@hot,pl
./ koniec i bomba, a kto czytal ten traba. w.g.
Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads