<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"
xmlns:ns0="urn:schemas-microsoft-com:office:smarttags">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:Arial;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><em><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy'>I make an namp search and
the result was its was talking to irc server ,is it normal <o:p></o:p></span></font></i></em></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>[root@asterisk1
~]# nmap 65.119.192.235<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'><o:p> </o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>Starting
nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2006-08-17 02:34 E<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>Interesting
ports on ftp2.c3icare.com (65.119.192.235):<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>(The
1650 ports scanned but not shown below are in state: closed)<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>PORT
STATE SERVICE<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>21/tcp
open ftp<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>135/tcp
filtered msrpc<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>139/tcp
filtered netbios-ssn<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>445/tcp
filtered microsoft-ds<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>990/tcp
open ftps<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>1000/tcp
open cadlock<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>1025/tcp
open NFS-or-IIS<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>3389/tcp
open ms-term-serv<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>4899/tcp
open radmin<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>10000/tcp
open snet-sensor-mgmt<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'><o:p> </o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>Nmap
run completed -- 1 IP address (1 host up) scanned in 352.570 seconds<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>[root@asterisk1
~]# nmap 83.133.127.60<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'><o:p> </o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>Starting
nmap 3.70 ( http://www.insecure.org/nmap/ ) at 2006-08-17 02:42 E<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>Interesting
ports on webdiscounter.ch (83.133.127.60):<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>(The
1651 ports scanned but not shown below are in state: closed)<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>PORT
STATE SERVICE<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>22/tcp
open ssh<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>135/tcp
filtered msrpc<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>139/tcp
filtered netbios-ssn<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>445/tcp
filtered microsoft-ds<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>1422/tcp
open autodesk-lm<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>6666/tcp
open irc-serv<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>6667/tcp
open irc<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>6668/tcp
open irc<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>7000/tcp
open afs3-fileserver<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'><o:p> </o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy;font-style:italic'>Nmap run
completed -- 1 IP address (1 host up) scanned in 496.802 seconds<o:p></o:p></span></font></i></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
asterisk-users-bounces@lists.digium.com
[mailto:asterisk-users-bounces@lists.digium.com] <b><span style='font-weight:
bold'>On Behalf Of </span></b>Khaled Chehab<br>
<b><span style='font-weight:bold'>Sent:</span></b> Thursday, August 17, 2006
9:41 AM<br>
<b><span style='font-weight:bold'>To:</span></b> 'Asterisk Users Mailing List -
Non-Commercial Discussion'<br>
<b><span style='font-weight:bold'>Cc:</span></b> asterisk-users-bounces@lists.digium.com<br>
<b><span style='font-weight:bold'>Subject:</span></b> [asterisk-users] Security</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Dear <o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>I am using
asterisk@home V 2.6.I used to sniff the server for 24 hours ,the result was
that my server is talking to another servers through port 80 and 22 and
1000,… tcp <o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Ips are
4.254.167.67<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>
65.119.192.235<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>
83.133.127.60<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Is there any
backdoor or a Trojan ,and how can I fix or debug it to be able to stop it,<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Remark: My
hard drive and my network is completely cleaned from viruses,I used to burn a
new image and I get these results .<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Regards<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<br>
<br>
<hr>
*********************************************<BR>
No employee or agent is authorized to conclude any binding agreement on behalf of Xplorium with another party by e-mail without express written confirmation by an officer of Xplorium. Any views expressed by an individual in this electronic message do not necessarily reflect views of Xplorium or its subsidiaries and associates.<BR>
<BR>
This electronic message and its attachments are solely addressed to the addressee(s), and contain confidential information protected from disclosure belonging to Xplorium.<BR>
<BR>
If you are not the intended addressee of this electronic message and its attachments, kindly delete it immediately from your system and notify the sender by electronic mail. You must not copy this message or attachment or disclose its content to any other person.<BR>
<BR>
Xplorium does not guarantee the integrity of this electronic message and any of its attachments, or that they are free from computer viruses or other defects.<BR>
*********************************************
<br>
</body>
</html>