unforum

digid · Boot Joined: 09 Jul 2007 Posts: 20 Location: Hollywood, CA

Port 12345 is open on slusho.jp

This is rather odd, when i telnet to the port it just hangs...

When i type into the terminal i get blank spacing and lines... This seems odd, considering this is traditionally a trojan port... But the numbering sequence is odd...

Ontop of that, i found several "proxy" ports... Not to say that's what they are, but is this anything of value you think?

**Posted:** Wed Jul 11, 2007 2:58 pm

Chronus_Valtiel

Way over my head. I wouldn't dig into ftps. If they're OOG there could be repercussions.

Be careful.

**Posted:** Wed Jul 11, 2007 3:00 pm

gott_sei_dank · Decorated Joined: 15 Apr 2007 Posts: 191

It looks like any name will do, needs a password though, however my knowledge of ftp is limited to getting stuff to my xbox

**Posted:** Wed Jul 11, 2007 3:01 pm

Chronus_Valtiel

XD Me too!

**Posted:** Wed Jul 11, 2007 3:05 pm

Lola · Boot Joined: 19 Apr 2007 Posts: 28 Location: Los Angeles

OOG but interesting:

http://www.breitbart.com/article.php?id=070711162154.zr8euodr&show_article=1&image=large

Japanese zoologists made the first recording of live giant squid...which are only palatable to sperm whales!

**Posted:** Wed Jul 11, 2007 3:06 pm

digid · Boot Joined: 09 Jul 2007 Posts: 20 Location: Hollywood, CA

They're running Pure-FTPd, which has an exploit for it!@ LoL

Yea, i can pretty much tell this is OOG... Based on the banner on the information.... Yes, you should beware, but chances are you're not the only people trying this... THis is to be expected from these type of games, and i'm sure an admin will continue to keep getting these hits....

Although, i've considered explioting the server, just to "cheat." But something that MIGHT be game related is the port 12345, which is just simply an odd port... I dont know why they have it open...

**Posted:** Wed Jul 11, 2007 3:06 pm

tiny420

*Paranoia sets in* This is all for real! The end of the days is coming! Slusho will take over the world and the attacks on 1-18-08 are going to happen! AHHHHHHHHHH!!! *Faints*

**Posted:** Wed Jul 11, 2007 3:08 pm

Chronus_Valtiel

...doom straws... DOOM STRAWS!!!!!!!!!!!!!!111111

OH MY GOD! OH MY GOD! OH MY G----

Anybody find anything? I got squat so far.

**Posted:** Wed Jul 11, 2007 3:16 pm

digid · Boot Joined: 09 Jul 2007 Posts: 20 Location: Hollywood, CA

Here is the list of ports i found open on this server, and their traditional services...

21 (ftp)
80 (www-http)
1155 (network file acccess) -- might be goodies in here
1025 (proxy)
1366 (netware-csp)
1080 (socks)
1498 (watcom-sql)
1417 (timbuktu-srv1)
1433 (ms-sql) --- lotta database stuff they have things in store for us
1434 (ms-sql)
1524 (not sure)
1525 (oracle)
3128 (squid)
4672 (remote file access)
4899 (Remote Admin)
4400 (proxy)
5190 (not sure typically AOL uses this port)
6000 (normally used when running an x11 server, for remote access of xwindows)
8080 (proxy)
12345 (not sure!?)

So, it seems whatever is in store with this website deals with a lot of remote database manipluation... I'm not sure how deep these games get into computer services, but i'm told "hacking" is often involved in same game problems... So, not sure what extent that might be involved?

**Posted:** Wed Jul 11, 2007 3:17 pm

grendelsden

Port 12345 is best known as the default of NetBus, a Trojan developed years ago, that allows a hacker to access data and gain control over some functions on a remote computer system.

More recently, it has been associated with Trend Micro's OfficeScan anti-virus product, which also uses, or listens on, port 12345.

Coming from a System Admin side of things, I wouldn't screw with it until there is something more concrete.

**Posted:** Wed Jul 11, 2007 3:21 pm

tiny420

Try this one on for size.

What if...hear me out. What if this was more than just a movie? What if the events portrayed in the trailer in a sequence to events that going to happen? What if there is a creature that is going to destroy New York on that date and all this is a decoy so that the real attacks will still take place. And Abrams is apart of some cult that believes there god is going to come back and tear some new asses. It's the Ultimate decoy! Think about it!

I feel better now.

**Posted:** Wed Jul 11, 2007 3:21 pm

Blicero · Veteran Joined: 24 Aug 2004 Posts: 93

i bet if you tried EATAFART as the user, you'd get the same "User OK" message.

**Posted:** Wed Jul 11, 2007 3:22 pm

Chronus_Valtiel

Tiny, just shh XDD.

But the hacking this is starting to cross lines. I'd wait for more evidence.

**Posted:** Wed Jul 11, 2007 3:23 pm

JimmieBJr · Unfettered Joined: 09 Jul 2007 Posts: 307

**Posted:** Wed Jul 11, 2007 3:25 pm

theShaggy

**Posted:** Wed Jul 11, 2007 3:25 pm

_________________
The Shaggy?
Playing nothing.
Being a student. Stupid education.