Could someone explain the relevance this might have? I found this file
as part of a root kit coupled with a modified version of either luckscan
or its ancestor the statd scanner. The scanner calls a mysterious progam
called x. It is scanning port 22. The file was called targets and
obviously looks to be at least header information. The hex is what I'm
not sure of. Handshaking data? I'd like someone to comment asap.
Thank you,
-=Jayson=-
here is the contents of targets pardon the word wrap there's only 3
lines to the file.
Small -
SSH-1.5-1.2.27,0x08070000,0x08184000,0x00000004,0x00010004,0x00000000,0x
08400000,0x7a,0x0805,0
Small -
SSH-1.99-OpenSSH_2.2.0p1,0x08180000,0x08184000,0x00000004,0x00010004,0x0
0000000,0x08400000,0x96,0x0805,0
Big -
SSH-1.99-OpenSSH_2.2.0p1,0x080b0000,0x08184000,0x37f8c00c,0x4011000c,0x401
1000c,0x4019000c,0x96,0x0805,1
