RE: New Probes

From: Bruce Martins (BMartins_at_extend.COM)
Date: 07/15/03

  • Next message: james: "Re: qmail smtp-auth bug allows open relay"
    Date: Tue, 15 Jul 2003 14:05:46 -0400
    To: "Porter, Gary" <Gary.Porter@matcomcorp.com>, <incidents@securityfocus.com>
    
    

    901 is normally used for SWAT a web interface for configuring SAMBA

    -----Original Message-----
    From: Porter, Gary [mailto:Gary.Porter@matcomcorp.com]
    Sent: Tuesday, July 15, 2003 8:01 AM
    To: 'incidents@securityfocus.com'

    I saw probes for the first time today on ports 45836 and 901. Anyone
    have an idea what they are looking for?

    Gary Porter
    gary.porter@matcomcorp.com

    ------------------------------------------------------------------------

    ----
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas,
    the world's premier technical IT security event! 10 tracks, 15 training
    sessions, 1,800 delegates from 30 nations including all of the top
    experts, from CSO's to "underground" security specialists.  See for
    yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out.
    www.blackhat.com
    ------------------------------------------------------------------------
    ----
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's to 
    "underground" security specialists.  See for yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------
    

  • Next message: james: "Re: qmail smtp-auth bug allows open relay"

    Relevant Pages

    • Re: Foundry ServerIronXL Question
      ... > Early-bird registration ends July 3. ... This event will sell out. ... world's premier technical IT security event! ... 10 tracks, 15 training sessions, ...
      (Focus-IDS)
    • RE: tcp/19150 scans
      ... world's premier technical IT security event! ... Early-bird registration ends July 3. ... This event will sell out. ... See for yourself what the buzz is about! ...
      (Incidents)
    • RE: Rather funny; looks like page defacement to me
      ... I think that Gartner Group themselves have become a victim of their own ... world's premier technical IT security event! ... Early-bird registration ends July 3. ... This event will sell out. ...
      (Focus-IDS)
    • Re: Cisco IOS Denial of Service that affects most Cisco IOS routers- requires power cycle to recover
      ... Cisco IOS Denial of Service that affects most Cisco IOS ... > world's premier technical IT security event! ... > Early-bird registration ends July 3. ... This event will sell out. ...
      (Incidents)
    • Re: UDP to port 500
      ... send out ISAKMP packets first to try to negotiate a secure ... >world's premier technical IT security event! ... >Early-bird registration ends July 3. ... This event will sell out. ...
      (Incidents)