Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.advocacy > #343812
| From | Desk Rabbit <me@example.com> |
|---|---|
| Newsgroups | comp.os.linux.advocacy |
| Subject | Re: Windows? |
| Date | 2016-02-17 14:16 +0000 |
| Organization | A noiseless patient Spider |
| Message-ID | <na1v5v$mdo$1@deskrabbit.motzarella.org> (permalink) |
| References | <20160216191422.48cb0e82@maxa-pc> <hgjdi30.jfie03@rooftop.invalid> <na00ua$iqi$1@dont-email.me> <thjdw03ra.safe@rooftop.invalid> |
On 16/02/2016 21:05, owl wrote: > Ezekiel <zeke@nosuchemail.com> wrote: >> >> "owl" <owl@rooftop.invalid> wrote in message >> news:hgjdi30.jfie03@rooftop.invalid... >>> Melzzzzz <mel@zzzzz.com> wrote: >>>> http://www.techtimes.com/articles/133874/20160216/hackers-hold-hollywood-hospital-s-computer-system-hostage-demand-3-6-million-as-patients-transferred.htm >>>> " >>>> Hackers have taken the computer system of the Hollywood Presbyterian >>>> Medical Center hostage, demanding 9,000 Bitcoin or $3.6 million. >>>> " >>> >>> Content-Length: 311 >>> Content-Type: text/html; charset=us-ascii >>> Server: Microsoft-HTTPAPI/2.0 >>> >> >> What's that, their webserver? >> > > Yeah. > >> Netcraft says the server is Mongrel running on Linux hosted by SoftLayer >> Technologies. >> > > Where does it say that? If I go to netcraft, it says IIS/8.5 > Is this not them? > http://toolbar.netcraft.com/site_report?url=http://www.hollywoodpresbyterian.com > >> If they're stupid enough to host *any* web server on the same machine as >> their backend patient data then they were asking for trouble. >> > > Not necessarily the same machine, but it reveals a reliance on Microsoft > technology. When the web server is IIS, I would guess that the backend > is SQL Server. There is a patient portal on the website, so internal > data can at least be touched via the web site. > > >> It's like putting a Windows server next to a fuel tank aboard a cruise ship. >> > > LOL! > > > That web server is on 184.175.96.210, try running nmap against that for a shocker! In short it's a case of Firewall? What's a Firewall?? A telnet to port 25 184.175.96.210 reveals Connected to 184.175.96.210. Escape character is '^]'. 220 vps.citilinks.com Hmm, looks like a Virtual Private Server probably hosted in a data centre (The Netblock assignment also suggests this). The domain of course takes you to this bunch of muppets http://citilinks.com/ who appear to be responsible for it. And this just makes me want to weep: ftp 184.175.96.210 Connected to 184.175.96.210 (184.175.96.210). 220 Microsoft FTP Service Name (184.175.96.210:root):
Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 19:14 +0100
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 13:42 -0500
Re: Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 19:54 +0100
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 14:19 -0500
Re: Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 20:52 +0100
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 15:23 -0500
Re: Windows? Desk Rabbit <me@example.com> - 2016-02-17 12:44 +0000
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 20:05 +0000
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 15:34 -0500
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 21:05 +0000
Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 16:42 -0500
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 22:13 +0000
Re: Windows? DFS <nospam@dfs.com> - 2016-02-16 19:41 -0500
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-17 00:49 +0000
Re: Windows? DFS <nospam@dfs.com> - 2016-02-16 20:05 -0500
Re: Windows? Desk Rabbit <me@example.com> - 2016-02-17 14:16 +0000
Re: Windows? owl <owl@rooftop.invalid> - 2016-02-17 18:59 +0000
Re: Windows? John Gohde <john.h.gohde@gmail.com> - 2016-02-17 05:11 -0800
csiph-web