Security Incidents mailing list archives

Re: Strange behaviour

From: john () DIAMONDSTAR NET (John Turner)
Date: Mon, 17 Jan 2000 23:12:46 -0500


2766 is not only a SOLARIS thing. SystemV and I am sure other *NIX flavors
as well. Your standard remote print port. An attack at that level could be
an attempt at a buffer overflow or just looking for weak security e.g.
wasting all your toner/paper on "SomeHacker Wuz Here" printed 1000 times.

-J

Current thread:

Strange behaviour, (continued)
- - - Strange behaviour Belgarion of Riva (Jan 13)
    - Re: Strange behaviour Richard Bejtlich (Jan 15)
    - UDP probing [ trojan? ] mabrown () SECUREPIPE COM (Jan 17)
    - Re: UDP probing [ trojan? ] Jose Nazario (Jan 18)
    - Probe from UK Provider ? Duarte Cordeiro (Jan 18)
    - Re: Probe from UK Provider ? Pauline van Winsen (Jan 19)
    - Re: Probe from UK Provider ? Arrigo Triulzi (Jan 20)
    - Re: Probe from UK Provider ? Gene Harris (Jan 20)
    - Re: Probe from UK Provider ? Jason Witty (Jan 20)
    - Solaris BSM Audit Logs Wozz (Jan 17)
    - Re: Strange behaviour John Turner (Jan 17)
    - SMTP bombing Kaupo Palo (Jan 18)
    - Log tools? Chad Day (Jan 17)
    - Re: Log tools? James Phillips (Jan 17)
    - Re: Log tools? Gene Harris (Jan 18)
    - Re: Log tools? Richard Trott (Jan 17)
    - Re: Log tools? Pauline van Winsen (Jan 18)
    - AMD/Port 100099 and portmap Daniel K. Boyd (Jan 18)
    - Re: AMD/Port 100099 and portmap CyberPsychotic (Jan 18)
    - Large quantity of traffic from amazon.com - source_port 3000 Peter Bates (Jan 13)
    - Re: Port 4 Lutz Pressler (Jan 12)

(Thread continues...)