Security Incidents mailing list archives
Re: Port Scan on 371...
From: shrdlu () PACBELL NET (Etaoin Shrdlu)
Date: Sun, 2 Jan 2000 14:46:03 -0800
"M. Edward Wilborne III" wrote:
Hello All, I'm seeing port scans on our network for port 371: Which I found port info at: http://www.con.wesleyan.edu/~triemer/network/docservs.html clearcase 371/tcp Clearcase clearcase 371/udp Clearcase However, I'm not sure what Clearcase is. Can anyone help with that?
I suppose most of the knowledgable folk are asleep, so I give you the following URL for your edification: http://www.l0pht.com/advisories/ClearCase.txt Perhaps the port scans you are seeing are hoping to exploit this, although I'm not sure why they'd continue to scan when they didn't find clearcase. -- http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0xFEF225AB http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x1A3510D1 ETAOIN SHRDLU CMFGYP WBVKXJ QZ
Current thread:
- Writeup: it. TLD going astray, (continued)
- Writeup: it. TLD going astray Arrigo Triulzi (Jan 03)
- Computer Forsenics System Administrator (Jan 03)
- Re: Computer Forsenics-> www.fish.com/forensics mike (Jan 03)
- traceroute ICMP packets Laszlo Fabian (Jan 04)
- Re: traceroute ICMP packets M J (Jan 04)
- Re: traceroute ICMP packets Larry Canup (Jan 18)
- Re: ICMP time exceed in-transit packets Paul Cardon (Jan 02)
- Re: Port Scan on 371... Etaoin Shrdlu (Jan 02)
- Re: Port Scan on 371... Christopher Wilson (Jan 02)
- correlation between porscans and local activity Thomas Molina (Jan 02)
- Re: correlation between porscans and local activity Sean Sosik-Hamor (Jan 03)
- ADMROCKS McNab, Chris (Jan 03)
- R: correlation between porscans and local activity Raistlin (Jan 04)
- Re: R: correlation between porscans and local activity Michael Babcock (Jan 12)