Welcome to the wonderful world of journal spam. He may well be posting from some zombied machine somewhere. Let see....
[alex]# nmap -O 217.141.80.3 Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-02-22 23:17 UTC Interesting ports on host3-80.pool217141.interbusiness.it (217.141.80.3): (The 1643 ports scanned but not shown below are in state: closed) PORT STATE SERVICE 7/tcp open echo 9/tcp open discard 13/tcp open daytime 17/tcp open qotd 19/tcp open chargen 42/tcp open nameserver 53/tcp open domain 80/tcp open http 139/tcp open netbios-ssn 445/tcp open microsoft-ds 1025/tcp open NFS-or-IIS 1080/tcp open socks 1720/tcp open H.323/Q.931 3006/tcp open deslogind 3372/tcp open msdtc 8080/tcp open http-proxy Device type: general purpose Running: Microsoft Windows 95/98/ME|NT/2K/XP OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
![[identity profile]](https://www.dreamwidth.org/img/silk/identity/openid.png){kind=small}
Re:
Date: 2004-02-22 03:31 pm (UTC)[alex]# nmap -O 217.141.80.3
Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-02-22 23:17 UTC
Interesting ports on host3-80.pool217141.interbusiness.it (217.141.80.3):
(The 1643 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
7/tcp open echo
9/tcp open discard
13/tcp open daytime
17/tcp open qotd
19/tcp open chargen
42/tcp open nameserver
53/tcp open domain
80/tcp open http
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
1080/tcp open socks
1720/tcp open H.323/Q.931
3006/tcp open deslogind
3372/tcp open msdtc
8080/tcp open http-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
I'm guessing so somehow...