Security Incidents mailing list archives

Probes to tcp 2766 ('System V Listner')

From: r.fulton () AUCKLAND AC NZ (Russell Fulton)
Date: Thu, 27 Jan 2000 14:48:25 +1200


Over the last few days I have seen several probes to tcp port 2766
which various sources identify as 'System V Listner'.  Yesterday some
one probed all machines on our net with PRT record on this port.

Does any one know anything about this service or why people are
suddenly looking for systems that offer it?

Or is this the latest site for root shell trojans (like ingress-lock)?

Cheers, Russell.

Current thread:

PC Anywhere client seems to probe class C of connected networks, (continued)
- - - PC Anywhere client seems to probe class C of connected networks Troy Ablan (Jan 25)
    - Re: PC Anywhere client seems to probe class C of connected networks Steve Ellermann (Jan 26)
    - Re: PC Anywhere client seems to probe class C of connected networks Paul L Schmehl (Jan 26)
    - Re: PC Anywhere client seems to probe class C of connected networks Jose Nazario (Jan 26)
    - Anti-Death Penalty Robert Graham (Jan 26)
    - Re: Anti-Death Penalty Derek Moeller (Jan 28)
    - Re: Anti-Death Penalty Robert Graham (Jan 28)
    - BOGUS.IvCD File Jonathan A. Zdziarski (Jan 26)
    - Re: BOGUS.IvCD File Vanja Hrustic (Jan 27)
    - Re: PC Anywhere client seems to probe class C of connected networks Robert Graham (Jan 26)
    - Probes to tcp 2766 ('System V Listner') Russell Fulton (Jan 26)
    - Re: No Idea Paul L Schmehl (Jan 25)
    - Re: No Idea Robert Graham (Jan 25)
    - Possible Probe = Possible Malfunction Ron Gula (Jan 25)
    - Possible attemt at hacking? Geir A. Bjune (Jan 25)
    - Re: Possible attemt at hacking? Brendan Grieve (Jan 27)
    - Re: ? Adam Boileau (Jan 25)
    - Korea (was RE: ?) Fernando Cardoso (Jan 26)
    - Strange DNS/TCP activity Pavel Kankovsky (Jan 26)
    - Re: Strange DNS/TCP activity Asmodeus (Jan 27)
    - Re: Strange DNS/TCP activity Roy Pait (Jan 27)

(Thread continues...)