Security Incidents: Re: Port Scan on 371...

From: Etaoin Shrdlu <shrdlu_at_PACBELL.NET>
Date: Sun, 2 Jan 2000 14:46:03 -0800

"M. Edward Wilborne III" wrote:
>
> Hello All,
>
> I'm seeing port scans on our network for port 371:
>
> Which I found port info at:
>
> http://www.con.wesleyan.edu/~triemer/network/docservs.html
>
> clearcase 371/tcp Clearcase
> clearcase 371/udp Clearcase
>
> However, I'm not sure what Clearcase is. Can anyone help with that?

I suppose most of the knowledgable folk are asleep, so I give you the
following URL for your edification:

http://www.l0pht.com/advisories/ClearCase.txt

Perhaps the port scans you are seeing are hoping to exploit this, although
I'm not sure why they'd continue to scan when they didn't find clearcase.

--
http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0xFEF225AB
http://pgp.ai.mit.edu:11371/pks/lookup?op=get&search=0x1A3510D1
ETAOIN SHRDLU CMFGYP WBVKXJ QZ

Received on Jan 02 2000