Re: has anybody ever seen this?

Dave McPike (dmcpike@henge1.henge.com)
Sun, 26 Nov 1995 03:01:35 -0700 (MST)

I'm not sure why. Just trying to figure out if it could be some kinda
exploited bug. I wasn't as concerned about this one as I was with the
one that I first saw (USERNAME: PPP). Hmmmm....but I haven't seen it
for a while.

dave

On Mon, 20 Nov 1995, Robert Shady wrote:

> > > > > S10 ATS0?S2?S3?S4?S - Log/Net In USERNAME 0 0
> > > >
> > > > Well, the first one certainly looks like someone may have been attempting
> > > > to put your modem in a command state and then query the registers. I
> > > > assume you have a security feature on your modem or have changed the
> > > > attention signal from +++, so this shouldn't be very sucessful.
> > >
> > > I'd be more willing to bet that the user on the other side doesn't realize
> > > that they're connected, and their software tried sending the modem init
> > > strings. I've seen it happen several times.
> >
> > Except that the ?'s would represent register queries rather than init
> > commands.
>
> Why would anyone care what the S0 register is set to? Let alone 1/2 of
> the other ones?
>
> -- Rob
> ===
> _/_/_/_/_/ _/_/_/_/ _/_/ _/ _/_/_/_/_/ _/_/_/_/_/
> _/ _/ _/ _/_/_/ _/ _/ _/ _/_/_/_/ _/
> _/_/_/_/_/ _/_/_/_/ _/ _/ _/_/_/_/_/ _/
>
> Innovative Data Services
> Serving South-Eastern Michigan
> Internet Service Provider / Hardware Sales / Consulting Services
> Voice: (810)855-0404 / Fax: (810)855-3268 / Web: http://www.id.net
>