[Snort-users] RE: 515/tcp scans on the rise
dr at ...381...
Sat Nov 18 03:30:07 EST 2000
On Fri, 17 Nov 2000, Christopher Cramer wrote:
> port 515 is the LPD port. There are often new exploits for LPD. I have
> heard of, but haven't checked out the details, for a new LPRng exploit.
> Perhaps this is what you are seeing probes for.
alternatively.... maybe someone is looking for old solaris boxes....
There were some remote printer exploits there...
More information about the Snort-users