Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.advocacy > #343822
| From | owl <owl@rooftop.invalid> |
|---|---|
| Newsgroups | comp.os.linux.advocacy |
| Subject | Re: Windows? |
| Date | 2016-02-17 18:59 +0000 |
| Organization | O.W.L. |
| Message-ID | <ghjdus93a.ar3@rooftop.invalid> (permalink) |
| References | <20160216191422.48cb0e82@maxa-pc> <hgjdi30.jfie03@rooftop.invalid> <na00ua$iqi$1@dont-email.me> <thjdw03ra.safe@rooftop.invalid> <na1v5v$mdo$1@deskrabbit.motzarella.org> |
Desk Rabbit <me@example.com> wrote: > On 16/02/2016 21:05, owl wrote: >> Ezekiel <zeke@nosuchemail.com> wrote: >>> >>> "owl" <owl@rooftop.invalid> wrote in message >>> news:hgjdi30.jfie03@rooftop.invalid... >>>> Melzzzzz <mel@zzzzz.com> wrote: >>>>> http://www.techtimes.com/articles/133874/20160216/hackers-hold-hollywood-hospital-s-computer-system-hostage-demand-3-6-million-as-patients-transferred.htm >>>>> " >>>>> Hackers have taken the computer system of the Hollywood Presbyterian >>>>> Medical Center hostage, demanding 9,000 Bitcoin or $3.6 million. >>>>> " >>>> >>>> Content-Length: 311 >>>> Content-Type: text/html; charset=us-ascii >>>> Server: Microsoft-HTTPAPI/2.0 >>>> >>> >>> What's that, their webserver? >>> >> >> Yeah. >> >>> Netcraft says the server is Mongrel running on Linux hosted by SoftLayer >>> Technologies. >>> >> >> Where does it say that? If I go to netcraft, it says IIS/8.5 >> Is this not them? >> http://toolbar.netcraft.com/site_report?url=http://www.hollywoodpresbyterian.com >> >>> If they're stupid enough to host *any* web server on the same machine as >>> their backend patient data then they were asking for trouble. >>> >> >> Not necessarily the same machine, but it reveals a reliance on Microsoft >> technology. When the web server is IIS, I would guess that the backend >> is SQL Server. There is a patient portal on the website, so internal >> data can at least be touched via the web site. >> >> >>> It's like putting a Windows server next to a fuel tank aboard a cruise ship. >>> >> >> LOL! >> >> >> > > That web server is on 184.175.96.210, try running nmap against that for > a shocker! In short it's a case of Firewall? What's a Firewall?? > > A telnet to port 25 184.175.96.210 reveals > Connected to 184.175.96.210. > Escape character is '^]'. > 220 vps.citilinks.com > > Hmm, looks like a Virtual Private Server probably hosted in a data > centre (The Netblock assignment also suggests this). The domain of > course takes you to this bunch of muppets http://citilinks.com/ who > appear to be responsible for it. > > And this just makes me want to weep: > ftp 184.175.96.210 > Connected to 184.175.96.210 (184.175.96.210). > 220 Microsoft FTP Service > Name (184.175.96.210:root): > lol I'll let you probe the system that's under investigation. :) What else is open?
Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 19:14 +0100
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 13:42 -0500
Re: Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 19:54 +0100
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 14:19 -0500
Re: Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 20:52 +0100
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 15:23 -0500
Re: Windows? Desk Rabbit <me@example.com> - 2016-02-17 12:44 +0000
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 20:05 +0000
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 15:34 -0500
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 21:05 +0000
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 16:42 -0500
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 22:13 +0000
Re: Windows? DFS <nospam@dfs.com> - 2016-02-16 19:41 -0500
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-17 00:49 +0000
Re: Windows? DFS <nospam@dfs.com> - 2016-02-16 20:05 -0500
Re: Windows? Desk Rabbit <me@example.com> - 2016-02-17 14:16 +0000
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-17 18:59 +0000
Re: Windows? John Gohde <john.h.gohde@gmail.com> - 2016-02-17 05:11 -0800
csiph-web