Re: [PEN-TEST] port 9200/udp scans (Print Lexmark)

From: Paulo Braga (pbx2kat_private)
Date: Mon Apr 30 2001 - 05:59:17 PDT

  • Next message: Rijndal Groeber: "Re: [PEN-TEST] wireless LAN traffic sniffing"

    Hi!
    
    Usually, 9200/UDP and 9203/UDP are associated with WAP Gateways.
    
    Just my cents.
    
    Paulo Braga
    
    
    >  Polar Bear wrote:
    >
    >  > Has anyone seen this type of scans:
    >  > 04/25-14:37:37.197887 y.y.69.18:61602 -> x.x.x.x:9200
    >  > UDP TTL:113 TOS:0x0 ID:28579 IpLen:20 DgmLen:41
    >  > Len: 21
    >  > 50 72 69 6E 74 20 4C 65 78 6D 61 72 6B           Print
    >  > Lexmark
    >  >
    >  > Lexmark printers have ports 9200/udp and 9200/tcp open
    >  > Why?
    >  > What will it do to a lexmark printer?
    >  > Which tool does it?
    >
    >  My Lexmark Optra S 1855 shows up in nmap with :
    >
    >  Starting nmap V. 2.3BETA13 by fyodorat_private (
    >  www.insecure.org/nmap/ )
    >  Interesting ports on papyrus` (172.16.21.17):
    >  Port    State       Protocol  Service
    >  7       open        tcp       echo
    >  21      open        tcp       ftp
    >  79      open        tcp       finger
    >  80      open        tcp       http
    >  515     open        tcp       printer
    >  631     open        tcp       unknown
    >  9100    open        tcp       jetdirect
    >
    >  TCP Sequence Prediction: Class=trivial time dependency
    >                           Difficulty=0 (Trivial joke)
    >  Remote operating system guess: Lexmark Optra S Printer
    >
    >  and
    >
    >  Interesting ports on papyrus (172.16.21.17):
    >  Port    State       Protocol  Service
    >  69      open        udp       tftp
    >  137     open        udp       netbios-ns
    >  161     open        udp       snmp
    >
    >  Port 631 can be tested via a Java-enabled browser with
    >  http://papyrus:631/.
    >
    >  I don't see port 9200/tcp here and also not in the manuals, so I don't
    >  know. I do know that snmpwalk shows too much data to include that in
    >  this message :-).
    >
    >  Regards,
    >
    >  Fred
    >  --
    >  Fred Mobach - fredat_private - postmasterat_private
    >  Systemhouse Mobach bv - The Netherlands - since 1976
    >
    >  The Free Transaction Processing Monitor project : http://www.ftpm.org/
    
    
    
    
    
    _______________________________________________________
    Send a cool gift with your E-Card
    http://www.bluemountain.com/giftcenter/
    



    This archive was generated by hypermail 2b30 : Mon Apr 30 2001 - 10:05:58 PDT