Security Incidents mailing list archives

Re: Slow SNMP scan...


From: Russell Fulton <R.FULTON () auckland ac nz>
Date: 19 Feb 2002 22:19:01 +1300

On Mon, 2002-02-18 at 22:35, Borja Marcos wrote:

      I am detecting them, too. I have contacted them by phone, and they say that 
their mail server has a Jetadmin program that detects printers automatically 
and about two weeks ago "it started to detect lots of printers all over the 
world".

Iv'e been seeing these things off an on for at least 5 years.  We had
one here on campus and finally figured out that the subnet mask had been
set to 225.225.225.0 so it had a very strange view of it's local
network...

-- 
Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: