[THIN] Re: Way OT but hey... i want to kill 2k server
- From: "Robertson, Russell" <Russell.Robertson@xxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Fri, 21 Feb 2003 08:31:20 -0000
Hi
There are "shutgui" and "shutdown" tools in the resource kit. These may =
help.
Cheers
Russell
-----Original Message-----
From: Kristof.DeMey@xxxxxxxxxxxxxx [mailto:Kristof.DeMey@xxxxxxxxxxxxxx] =
Sent: 21 February 2003 08:05
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Way OT but hey... i want to kill 2k server
Hi group
=20
I have a rather funny issue here...
Someone has implemeted a server in the network here but we cant find it =
:)
He is using a range reserved for our trading people and they want to =
bring
the=20
server down to be able to use the ip it has in ues.. There is also a =
SLAMMER
VULNERABLE=20
sql server installed and thats also a reason to take it out.
=20
We have only: IP Addres and Hostname,=20
No login info, he's not added to a domain , nobody seems to be aware of =
the
machine,=20
No dns record in the dns server..
=20
I'v send mails too all it personel (about 400) and nobody knows about =
the
machine.
So i am DIENG to kill it remote.
=20
We tried spamming it with a telnet on port 19 (rdm text generator) but =
the
simple tcp ip services are disabled
I tried the SMB die vulnerability but he is NOT vulnerable.
=20
Any one any ideeN? I tried remote registry suff and all but nothing =
seems to
work.
We are slowing it down by issueing huge ping request but untill now =
nobody
is complaining so still no luck :)
=20
Anyone?
=20
Thx in advance....
=20
Any tip to slow the bagger down is also verry welcome!=20
That way we can trigger the "server installer" to call the networking
department and then we got him :)
=20
=20
=20
=20
Met vriendelijke groeten - Bien =E0 vous ,=20
Kristof De Mey=20
Electrabel IT-Services - Infrastructure Services=20
Service Operations - Exploitation NT & Mailing Systems=20
=20
Werhuizenkaai 16 - Q015 - 1000 Brussel=20
Tel intern: 80.3387 - Tel: 00-32-2-206 33 87=20
Fax intern: 80.3427 - Fax: 00-32-2-206 34 27=20
=20
*********************************************************
This Week's Sponsor - Neoware=20
Now through March 31, 2003=20
Neoware is offering a Capio 500/Eon Proven 2100=20
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html
**********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
*********************************************************
This Week's Sponsor - Neoware
Now through March 31, 2003
Neoware is offering a Capio 500/Eon Proven 2100
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
