Re: [PEN-TEST] port 9200/udp scans (Print Lexmark)

From: Fred Mobach (fredat_private)
Date: Sun Apr 29 2001 - 08:17:05 PDT

  • Next message: Felix Huber: "Re: [PEN-TEST] RPC enumeration"

    Polar Bear wrote:
    
    > Has anyone seen this type of scans:
    > 04/25-14:37:37.197887 y.y.69.18:61602 -> x.x.x.x:9200
    > UDP TTL:113 TOS:0x0 ID:28579 IpLen:20 DgmLen:41
    > Len: 21
    > 50 72 69 6E 74 20 4C 65 78 6D 61 72 6B           Print
    > Lexmark
    >
    > Lexmark printers have ports 9200/udp and 9200/tcp open
    > Why?
    > What will it do to a lexmark printer?
    > Which tool does it?
    
    My Lexmark Optra S 1855 shows up in nmap with :
    
    Starting nmap V. 2.3BETA13 by fyodorat_private (
    www.insecure.org/nmap/ )
    Interesting ports on papyrus` (172.16.21.17):
    Port    State       Protocol  Service
    7       open        tcp       echo
    21      open        tcp       ftp
    79      open        tcp       finger
    80      open        tcp       http
    515     open        tcp       printer
    631     open        tcp       unknown
    9100    open        tcp       jetdirect
    
    TCP Sequence Prediction: Class=trivial time dependency
                             Difficulty=0 (Trivial joke)
    Remote operating system guess: Lexmark Optra S Printer
    
    and
    
    Interesting ports on papyrus (172.16.21.17):
    Port    State       Protocol  Service
    69      open        udp       tftp
    137     open        udp       netbios-ns
    161     open        udp       snmp
    
    Port 631 can be tested via a Java-enabled browser with
    http://papyrus:631/.
    
    I don't see port 9200/tcp here and also not in the manuals, so I don't
    know. I do know that snmpwalk shows too much data to include that in
    this message :-).
    
    Regards,
    
    Fred
    --
    Fred Mobach - fredat_private - postmasterat_private
    Systemhouse Mobach bv - The Netherlands - since 1976
    
    The Free Transaction Processing Monitor project : http://www.ftpm.org/
    



    This archive was generated by hypermail 2b30 : Sun Apr 29 2001 - 18:33:18 PDT