Wardial 780-425-XXXX : "Lord Phungus" : 1996/12 Its got me on the run... AC (A Prophet Perhaps) WARNING: Calling a fone number once is one thing, trying to hack a found login is illegal. This is a presentation of how insecure the computers that are used to control our lives really are. I do not condone scanning, or hacking in any shape or form. Should you get caught doing the nasty, it is your fault, not mine... that which is me and not you. This is a partial list of a scan, using THCSCAN, which as I am sure you have already noted... is my fav. To protect the innocent, that being me and that which is not you (though you may be innocent of other things) I have at this time edited the list somewhat. I must admit that I was shocked at the number of carriers that show up in any one exchange. You will find many Connects ---> No Carriers (which are kinda interesting) as well as many things that show up without even supplying a password. It is amazing what a nudge string can do. In one instance you will see many XXX's, sorry, but the information found there shocked me so much that it had to be done. On a side note, after reviewing and editing the logs I found to my chagrin, a login to a vax that I missed. I must admit that it is something that I have looked for with great anticipation. Being a unix type of phungus, I have always wanted to try my spores at Open VM. So hold my calls, I will be busy for a while to come... 05-12-96 06:11:17 Dialing... 425-1586 CONNECT 33600/ARQ/V34/LAPM/V42BIS NO CARRIER 05-12-96 06:57:51 Dialing... 425-2834 CONNECT 31200/ARQ/V34/LAPM/V42BIS NO CARRIER 05-12-96 08:10:24 Dialing... 425-2069 CONNECT 14400/ARQ/V32/LAPM/V42BIS login: login: ? login: Password: guest guest Login incorrect login: Password: LOGIN Login incorrect login: login: Password: NO CARRIER 05-12-96 08:25:18 Dialing... 425-1267 CONNECT 1200/NONE NO CARRIER 05-12-96 08:54:08 Dialing... 425-1341 CONNECT 9600/ARQ/V32/LAPM edmonton Welcome to Bull Open Software B.O.S. Release 02.00 Login: ? edmonton Welcome to Bull Open Software B.O.S. Release 02.00 Login: Password: guest Login incorrect login: guestPassword: INFO LOGIN Login incorrect login: Password: NO CARRIER 05-12-96 09:08:32 Dialing... 425-1515 CONNECT 33600/ARQ/V34/LAPM/V42BIS NO CARRIER 05-12-96 09:33:16 Dialing... 425-1132 CONNECT 28800/ARQ/V34/LAPM NO CARRIER 05-12-96 10:33:42 Dialing... 425-0352 CONNECT 14400/ARQ/V32/LAPM/V42BIS passwd> NO CARRIER 05-12-96 11:15:51 Dialing... 425-1546 CONNECT 2400/NONE NO CARRIER 05-12-96 11:36:28 Dialing... 425-0042 CONNECT 1200/NONE [AUTODETECTED 7E1 - REPRINTING] NO CARRIER 05-12-96 11:51:23 Dialing... 425-1642 CONNECT 9600/V32/NONE NO CARRIER 05-12-96 12:02:06 Dialing... 425-2836 CONNECT 9600/V32/NONE NO CARRIER 05-12-96 12:30:44 Dialing... 425-0289 CONNECT NO CARRIER 05-12-96 13:13:00 Dialing... 425-1741 CONNECT NO CARRIER 05-12-96 13:35:59 Dialing... 425-0395 CONNECT 14400/V32/NONE ? help Login incorrect login: login: Password: guest INFO LOGIN Login incorrect login: Password: NO CARRIER 05-12-96 14:01:12 Dialing... 425-2131 CONNECT 14400/V32/NONE INFO Connected to NetWare CONNECT 1.0.34 Service Selector on port PORT_2. Sorry, there are no services available at this time. NO CARRIER 05-12-96 14:28:00 Dialing... 425-1568 CONNECT 9600/ARQ/V32/LAPM/V42BIS Help -- KEYS -- EXECUTE COMMAND -- CLEAR COMMAND -- MOVE LEFT -- MOVE RIGHT Help -- Commands Available COMPARE DEVICE DATE DEVICE STATUS ECHO OFF ECHO ON HAVE CONTROL HAVE PROGRAM MEMORY PASS SEND COMMAND SEND STRING SLOT ON[dev,chan] OFF[dev,chan] PULSE[dev,chan] SET DATE SET TIME SHOW DEVICE SHOW INPUT OFF SHOW INPUT ON SYSTEM RESET VERSION TIME Help -- KEYS -- EXECUTE COMMAND -- CLEAR COMMAND -- MOVE LEFT -- MOVE RIGHT Help -- Commands Available COMPARE DEVICE DATE DEVICE STATUS ECHO OFF ECHO ON HAVE CONTROL HAVE PROGRAM MEMORY PASS SEND COMMAND SEND STRING SLOT ON[dev,chan] OFF[dev,chan] PULSE[dev,chan] SET DATE SET TIME SHOW DEVICE SHOW INPUT OFF SHOW INPUT ON SYSTEM RESET VERSION TIME ERROR ERROR ERROR ERROR NO CARRIER 05-12-96 15:19:26 Dialing... 425-0136 CONNECT 1200/NONE NO CARRIER 05-12-96 15:28:19 Dialing... 425-2988 CONNECT 2400/NONE Username : Username : ? Password : Login Failure! Username : GUEST Password : Login Failure! Username : INFO Password : Login Failure! Too many attempts! Time limit expired! NO CARRIER 05-12-96 15:30:03 Dialing... 425-1439 CONNECT 31200/ARQ/V34/LAPM/V42BIS ATV1I3 NO CARRIER 05-12-96 15:49:06 Dialing... 425-2774 CONNECT 14400/ARQ/V32/LAPM NO CARRIER 05-12-96 15:54:23 Dialing... 425-1564 CONNECT 2400/NONE NO CARRIER 05-12-96 16:14:54 Dialing... 425-1367 CONNECT 28800/ARQ/V34/LAPM NO CARRIER 05-12-96 16:19:44 Dialing... 425-1110 CONNECT 28800/ARQ/V34/LAPM NO CARRIER 05-12-96 16:38:31 Dialing... 425-1444 CONNECT 2400/NONE NO CARRIER 05-12-96 16:42:39 Dialing... 425-1704 CONNECT 28800/ARQ/V34/LAPM NO CARRIER 06-12-96 09:35:58 Dialing... 425-1567 CONNECT 2400/NONE NO CARRIER 06-12-96 09:39:31 Dialing... 425-1073 CONNECT 1200/NONE NO CARRIER 06-12-96 09:40:54 Dialing... 425-0325 CONNECT 1200/NONE NO CARRIER 06-12-96 10:10:48 Dialing... 425-1438 CONNECT 14400/V32/NONE IPSawmill SMILL DOWNTOWN C SMILL DOWNTOWN NO CARRIER 06-12-96 10:24:12 Dialing... 425-2024 CONNECT 33600/ARQ/V34/LAPM/V42BIS NO CARRIER 06-12-96 10:27:49 Dialing... 425-2171 CONNECT 33600/V34/NONE Connected to NetWare CONNECT 1.0.34 Service Selector on port PORT_3. Sorry, there are no services available at this time. NO CARRIER 06-12-96 10:43:05 Dialing... 425-0418 CONNECT 14400/ARQ/V32/LAPM/V42BIS NO CARRIER 06-12-96 11:19:08 Dialing... 425-1271 CONNECT 1200/NONE [C] ?Invalid Keyword? R-1> R-1>? The following system commands are available: ASSIGN CLEAR DISABLE DOMAIN DUMP EDIT ENABLE FIND IOU LEDIT LOAD MODIFY OPTION PRINT RELOAD ROTATE SAVE SLOAD SSAVE SET TRACE Keyword options for selected commands: CLEAR drum | error | history | memory PRINT disabled | drum help| error | graph | history | index PRINT overrides | pointers | status | time PRINT variable | iou | variable-class (F, V, X, A, SA, SF, SV or SX) | ALL SET scan | history | our | time EDITor specific commands: C -- Close, complete edit session G n -- Get Drum n; Drum n is merged into the current drum guest O n -- Open line # n P m,n-- Print line n from drum m; m or m & n are optional Sguest v,y-- Substitute all variable-v to variable-y in the drum Z n -- Zap line n; if omitted current line / field Additional EDITor commands forINFO control druLOGINms: nA -- select action field n; if omitted the last action field nX -- select exit conditional n; if omitted the last exit conditional R-1> The following system commands are available: ASSIGN CLEAR DISABLE DOMAIN DUMP EDIT ENABLE FIND IOU LEDIT LOAD MODIFY OPTION PRINT RELOAD ROTATE SAVE SLOAD SSAVE SET TRACE Keyword options for selected commands: CLEAR drum | error | history | memory PRINT disabled | drum | error | graph | history | index PRINT overrides | pointers | status | time PRINT variable | iou | variable-class (F, V, X, A, SA, SF, SV or SX) | ALL SET scan | history | our | time NO CARRIER 06-12-96 11:20:35 Dialing... 425-1125 CONNECT 28800/ARQ/V34/LAPM NO CARRIER 06-12-96 11:36:02 Dialing... 425-1112 CONNECT 28800/ARQ/V34/LAPM NO CARRIER 06-12-96 12:02:16 Dialing... 425-0117 CONNECT 14400/ARQ/V32/LAPM NO CARRIER 06-12-96 12:18:17 Dialing... 425-1409 CONNECT 14400/ARQ/V32/LAPM/V42BIS fsserv Welcome to SCO System V/386 fsserv!login: Welcome to SCO System V/386 fsserv!login: ? Password: Login incorrect Wait for login retry: guest LOGIN .... login: Password: NO CARRIER 06-12-96 12:27:08 Dialing... 425-0806 CONNECT 28800/ARQ/V34/LAPM NO CARRIER 06-12-96 12:52:31 Dialing... 425-0124 CONNECT 28800/ARQ/V34/LAPM/V42BIS PLEASE ENTER YOUR PASSWORD ===>> NO CARRIER 10-12-96 09:26:44 Dialing... 425-5093 CARRIER 300 PROTOCOL: NONE CONNECT NO CARRIER 10-12-96 10:06:06 Dialing... 425-5844 CARRIER 300 PROTOCOL: NONE CONNECT 10-12-96 10:17:00 Dialing... 425-4163 CARRIER 14400 PROTOCOL: LAP-M COMPRESSION: NONE CONNECT 14400/ARQ NO CARRIER 10-12-96 10:54:42 Dialing... 425-5569 CARRIER 28800 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 28800/ARQ %% Unable to create EXEC - no memory or too many processes NO CARRIER 10-12-96 10:56:49 Dialing... 425-6365 CARRIER 14400 PROTOCOL: NONE NO CARRIER 10-12-96 11:07:38 Dialing... 425-5148 CARRIER 28800 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 28800/ARQ %% Unable to create EXEC - no memory or too many processes NO CARRIER 10-12-96 11:09:40 Dialing... 425-4342 CARRIER 300 PROTOCOL: NONE CONNECT NO CARRIER 10-12-96 11:44:39 Dialing... 425-5674 CARRIER 28800 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 28800/ARQ AGNPAC: 4007 074 AGNPAC: 4007 074 NO CARRIER 10-12-96 11:58:38 Dialing... 425-6219 CARRIER 28800 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 28800/ARQ XUCASR03 line 10 Welcome to #### ######### ######## ## ## ## ## ## ## ## ## # # ## ########## ## ## ## ## ## ## # # ## ## ## ## ## # ## ##### # # # ### # ### ### # ### # # ## # # # # # #### # # #### ##### #### # # # # # # # # # # # # ##### ### # # ### ##### ### VOUS SOUHAITE LA BIENVENUE NO CARRIER 10-12-96 12:10:59 Dialing... 425-4129 CARRIER 300 PROTOCOL: NONE CONNECT NO CARRIER 10-12-96 13:38:46 Dialing... 425-5524 CARRIER 9600 PROTOCOL: LAP-M COMPRESSION: V.42BIS Minicom Data Corporation System KB Operator ID: Minicom Data Corporation System KB Operator ID: Minicom Data Corporation System KB Operator ID: Minicom Data Corporation System KB NO CARRIER 10-12-96 14:05:13 Dialing... 425-4760 CARRIER 9600 PROTOCOL: NONE CONNECT 9600 NO CARRIER 10-12-96 14:15:19 Dialing... 425-4008 CARRIER 1200 PROTOCOL: NONE CONNECT 1200 NO CARRIER 10-12-96 14:32:36 Dialing... 425-6070 CARRIER 300 PROTOCOL: NONE CONNECT NO CARRIER 10-12-96 14:43:23 Dialing... 425-4525 CARRIER 2400 PROTOCOL: ALT COMPRESSION: NONE CONNECT 2400/ARQ NO CARRIER 10-12-96 14:54:28 Dialing... 425-4605 CARRIER 14400 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 14400/ARQ NO CARRIER 10-12-96 15:21:14 Dialing... 425-5691 CARRIER 28800 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 28800/ARQ AGNPAC: 4007 078 NO CARRIER 10-12-96 15:26:11 Dialing... 425-4223 CARRIER 14400 PROTOCOL: NONE CONNECT 14400 NO CARRIER 12-12-96 09:51:49 Dialing... 425-5710 CARRIER 300 PROTOCOL: NONE CONNECT NO CARRIER 12-12-96 10:14:58 Dialing... 425-4320 CARRIER 9600 PROTOCOL: NONE CONNECT 9600 NO CARRIER 12-12-96 10:17:47 Dialing... 425-5698 CARRIER 14400 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 14400/ARQ automtr login: automtr login: ? automtr login: automtr login: guest Password: Login incorrect login: INFO Password: Login incorrect login: LOGIN Password: NO CARRIER 12-12-96 10:26:39 Dialing... 425-4578 CARRIER 2400 PROTOCOL: NONE CONNECT 2400 NO CARRIER 12-12-96 10:46:41 Dialing... 425-3740 CARRIER 14400 PROTOCOL: LAP-M COMPRESSION: NONE CONNECT 14400/ARQ __________________________________________________ // \\ // NOTICE! \\ // \\ // Use of this System is restricted. \\ \\ // \\ If you are not authorized to use this // \\ System, you must leave immediately. // \\________________________________________________// login 9600: ? NO CARRIER 12-12-96 11:19:34 Dialing... 425-6547 CARRIER 14400 PROTOCOL: LAP-M COMPRESSION: NONE NO CARRIER CONNECT This one is HEAVILY EDITED, SORRY Login incorrect login: Capital Care Group Page 1 McConnell Place North 94/11/22 Resident Registry 10:00:17 Resident Name: XXXXXX, XXXXXXXX Middle Init: Preferred Name: Kris Resident No: XXXXXXXX Physician: Dr. C. XXXXXX Accommodation: Unit: CHO Room: 101 Bed: XX Requested: Semi-Private Provided: Semi-Private Admission Information Type: Fulltime Level: Nursing Program: Regular Date Admitted: 95/11/10 Discharge Date: Admitted From: Glenrose Rehab. Hospital Discharged To: Priority: U Urgent Insurance Data Code Number Personal Information Birth Date: 19XX/XX/XX Age: XX ABC XXXXX.XXXX Sex: Female AHCIP Marital Status: Widow/Widower AISH Canadian Citizen: Yes EHB Religion: Not Available OAS XX.XXX.XXX.XXX Address: XXXX Strathcona XXXXX PHN XXXX.XXXX Edmonton, AB SIN VAC Clinical Information DIAGNOSIS: ICD9 Code & Description Additional Information 290 Dementia Alzheimer's 244 Hypothyroidism 995 Adverse effects not elsewhere medication allergies Allergies: yes ADDRESS XX XXXXridge Crescent XX. XXXXXX, AB XXXXXX Allergic to Penicillin, Clozacillin, Tetracycline, Erythromycin, polyester The Capital Care Group NO CARRIER 12-12-96 12:41:14 Dialing... 425-4513 CARRIER 9600 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 9600/ARQ PLEASE ENTER PASSWORD: INVALID PASSWORD, TRY AGAIN !!! PLEASE ENTER PASSWORD: NO CARRIER 12-12-96 12:52:53 Dialing... 425-5532 CARRIER 28800 PROTOCOL: LAP-M COMPRESSION: V.42BIS NO CARRIER 13-12-96 15:52:11 Dialing... 425-6217 CARRIER 28800 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 28800/ARQ XUCASR03 line 9 Welcome to #### ######### ######## ## ## ## ## ## ## ## ## # # ## ########## ## ## ## ## ## ## # # ## ## ## ## ## # ## ##### # # # ### # ### ### # ### # # ## # # # # # #### # # #### ##### #### # # # # # # # # # # # # ##### ### # # ### ##### ### VOUS SOUHAITE LA BIENVENUE ? Exec commands: disconnect Disconnect an existing network connection exit Exit from the EXEC help Description of the interactive help system login Log in as a particular user logout Exit from the EXEC pad Open a X.29 PAD connection ppp Start IETF Point-to-Point Protocol (PPP) terminal Set terminal line parameters help Help may be requested at any point in a command by entering a question mark '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available optns. Two styles of help are provided: 1. Full help is available when you are ready to enter a command argument (e.g. 'show ?') and describes each possible argument. 2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match the input (e.g. 'show pr?'.) Username: timeout expired! NO CARRIER 16-12-96 09:18:16 Dialing... 425-5481 CARRIER 14400 PROTOCOL: NONE CONNECT 14400 #ident "sccsinfo @(#)issue 1.1 4/29/93 13:51:24" Welcome to the Metscan Distribution Monitoring System running under the INTERACTIVE UNIX Operating System System name: node16 login: Password: help Login incorrect login: Password: guest INFO LOGIN Login incorrect login: Password: NO CARRIER 16-12-96 09:20:01 Dialing... 425-4322 CARRIER 28800 PROTOCOL: LAP-M COMPRESSION: V.42BIS CONNECT 28800/ARQ Welcome to the Software Alberta Society Login Server (Edmonton) If your account type is: Dial-in type: dns Slip/PPP type : Otherwise, in all cases, press to continue. spring login: NO CARRIER 17-12-96 11:13:15 Dialing... 425-6633 CARRIER 4800 PROTOCOL: ALT COMPRESSION: CLASS 5 CONNECT 4800/ARQ Network Access SW V1.5 for DS700-16 (BL95-33) (c) Copyright 1994, Digital Equipment Corporation - All Rights Reserved Please type HELP if you need assistance Enter username> Network Access SW V1.5 for DS700-16 (BL95-33) (c) Copyright 1994, Digital Equipment Corporation - All Rights Reserved Please type HELP if you need assistance Enter username> Enter your name at this prompt to get the access server prompt. For further assistance, type HELP TUTORIAL at the access server prompt. Enter CTRL/Z or RETURN to continue...guest Network Access SW V1.5 for DS700-16 (BL95-33) (c) Copyright 1994, Digital Equipment Corporation - All Rights Reserved Please type HELP if you need assistance Enter username> guest Local -010- Session 1 to EDS established NO CARRIER 18-12-96 11:11:51 Dialing... 425-5286 CARRIER 9600 PROTOCOL: ALT COMPRESSION: CLASS 5 CONNECT 9600/ARQ User Access Verification Password: Password: Password: edmonton con0 is now available Press RETURN to get started. NO CARRIER