Security Incidents mailing list archives

Re: PC Anywhere client seems to probe class C of connected networks

From: jose () BIOCSERVER BIOC CWRU EDU (Jose Nazario)
Date: Wed, 26 Jan 2000 16:44:02 -0500


On Wed, 26 Jan 2000, Paul L Schmehl wrote:

Unfortunately, PC Anywhere assumes it's on a Windoze network, and it goes
out looking for connections on every host it can find.  The port numbers
you cite are the two ports it uses for its connections.

--On 1/25/00, 5:06 PM -0500 Troy Ablan <chaser () SHORE NET> wrote:

A new rash of abuse desk inquiries have to do with PC Anywhere probes on
port 5632 and ssh port 22 from clients within the same class C as the
computers reporting the probing.


Please know that SSH uses TCP/22 and PC Anywhere used 22/UDP. That's a big
difference.

jose nazario                                    jose () biochemistry cwru edu
PGP fingerprint: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
Public key available at http://biocserver.cwru.edu/~jose/pgp-key.asc

Current thread:

Re: I was scaned, (continued)
- - - Re: I was scaned Keith Owens (Jan 24)
    - Got scaned again C. (Jan 24)
    - ? C. (Jan 24)
    - Re: ? Mike Tancsa (Jan 24)
    - Re: ? Brock Sides (Jan 24)
    - Re: unapproved AXFR Russell Fulton (Jan 24)
    - No Idea CN (Jan 25)
    - PC Anywhere client seems to probe class C of connected networks Troy Ablan (Jan 25)
    - Re: PC Anywhere client seems to probe class C of connected networks Steve Ellermann (Jan 26)
    - Re: PC Anywhere client seems to probe class C of connected networks Paul L Schmehl (Jan 26)
    - Re: PC Anywhere client seems to probe class C of connected networks Jose Nazario (Jan 26)
    - Anti-Death Penalty Robert Graham (Jan 26)
    - Re: Anti-Death Penalty Derek Moeller (Jan 28)
    - Re: Anti-Death Penalty Robert Graham (Jan 28)
    - BOGUS.IvCD File Jonathan A. Zdziarski (Jan 26)
    - Re: BOGUS.IvCD File Vanja Hrustic (Jan 27)
    - Re: PC Anywhere client seems to probe class C of connected networks Robert Graham (Jan 26)
    - Probes to tcp 2766 ('System V Listner') Russell Fulton (Jan 26)
    - Re: No Idea Paul L Schmehl (Jan 25)
    - Re: No Idea Robert Graham (Jan 25)
    - Possible Probe = Possible Malfunction Ron Gula (Jan 25)

(Thread continues...)