[THIN] Re: Way OT but hey... i want to kill 2k server
- From: "Nail, Larry" <lnail@xxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Sun, 23 Feb 2003 12:54:37 -0600
If you can get a MAC address, perhaps your network folks can shut it down at
the port level.
-----Oorspronkelijk bericht-----
Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens
Kristof.DeMey@xxxxxxxxxxxxxx
Verzonden: vrijdag 21 februari 2003 9:05
Aan: thin@xxxxxxxxxxxxx
Onderwerp: [THIN] Way OT but hey... i want to kill 2k server
Hi group
=20
I have a rather funny issue here...
Someone has implemeted a server in the network here but we cant find it =
:)
He is using a range reserved for our trading people and they want to = bring
the=20 server down to be able to use the ip it has in ues.. There is also a
= SLAMMER VULNERABLE=20 sql server installed and thats also a reason to take
it out. =20 We have only: IP Addres and Hostname,=20 No login info, he's not
added to a domain , nobody seems to be aware of = the machine,=20 No dns
record in the dns server.. =20 I'v send mails too all it personel (about
400) and nobody knows about = the machine. So i am DIENG to kill it remote.
=20 We tried spamming it with a telnet on port 19 (rdm text generator) but =
the simple tcp ip services are disabled I tried the SMB die vulnerability =
but he is NOT vulnerable. =20 Any one any ideeN? I tried remote registry
suff and all but nothing = seems to work. We are slowing it down by issueing
huge ping request but untill = now nobody is complaining so still no luck :)
=20 Anyone? =20 Thx in advance.... =20 Any tip to slow the bagger down is
also verry welcome!=20 That way we can trigger the "server installer" to
call the networking department and then we got him :) =20 =20 =20 =20
Met vriendelijke groeten - Bien =E0 vous ,=20
Kristof De Mey=20
Electrabel IT-Services - Infrastructure Services=20
Service Operations - Exploitation NT & Mailing Systems=20
=20
Werhuizenkaai 16 - Q015 - 1000 Brussel=20
Tel intern: 80.3387 - Tel: 00-32-2-206 33 87=20
Fax intern: 80.3427 - Fax: 00-32-2-206 34 27=20
=20
*********************************************************
This Week's Sponsor - Neoware=20
Now through March 31, 2003=20
Neoware is offering a Capio 500/Eon Proven 2100=20
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html
**********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
*********************************************************
This Week's Sponsor - Neoware
Now through March 31, 2003
Neoware is offering a Capio 500/Eon Proven 2100
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
*********************************************************
This Week's Sponsor - Neoware
Now through March 31, 2003
Neoware is offering a Capio 500/Eon Proven 2100
for $299! Click the link below:
http://www.neoware.com/promocp4a/thinnetban.html
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
