Konica Minolta C287i prints random text

[Mtrasa]

Hello everybody!

In our company we have a problem with random printing. It prints by itself and over night too.

48127

[Phil B.]

Hello everybody!

In our company we have a problem with random printing. It prints by itself and over night too.

48127

ASCII code.. you have a corrupt print driver or the WRONG print driver installed

what driver are you using?

are you a trained tech?

[emujo2]

Phil is 100% correct here..you are sending true PS data to a PCL print driver..I have seen jobs like this run until the finisher get's to it's low limit..My guess is you used to send these jobs to HP devices with no problems..You need the download and install KM's PS driver (this is PS emulation, but works pretty well). E

[emujo2]

BTW the last 2 posts have been regarding machines that don;t seem to be available in the US (no results for C278i or 367)..Am I missing something? E

[Bix]

Hello everybody!

In our company we have a problem with random printing. It prints by itself and over night too.

48127
Your printer has a public IP. Someone, from anywhere in the world, is printing to your printer.


Check the firewall or enable ip filtering on the printer.

[Phil B.]

Your printer has a public IP. Someone, from anywhere in the world, is printing to your printer.


Check the firewall or enable ip filtering on the printer.


then they are using the wrong print driver..

frankly I don't see this being the case... i still go with the WRONG print driver.

[B0265]

Your printer has a public IP. Someone, from anywhere in the world, is printing to your printer.


Check the firewall or enable ip filtering on the printer.

Or someone is trying to attack a router and use the printers ip-address:
CVE-2018-14847 and Router Compromises (penetrate.io) (https://penetrate.io/cve-2018-1484-and-router-compromises/)

[Bix]

then they are using the wrong print driver..

frankly I don't see this being the case... i still go with the WRONG print driver.

Strangers on the web don't know the printer driver, so they send files with the wrong driver. For a long time, I had a public IP for my office printer because I was waiting for the firewall. Every morning I found papers similar to those.
Use the Shodan.io website. You will discover a lot of printers with a public ip and default administrator password.

[emujo2]

Do you know how hard it is to accidently put a printer into the DMZ and allow public access? This is not very likely, but I did see a local university that got hacked via port 25 and print jobs emptied every machine over the weekend..But the print jobs did not look like this..Those wingdings really point to a driver issue. E

[Bix]

The problem is that many small businesses don't even know what a DMZ is. In germany we still have companies that prefer fax instead of email..
So this doesn't surprise me. ;)The doubt about the public IP arose immediately because the user says that the printer prints even at night, when there is no one in the office. :eek:

[femaster]

Could be either one of the 2 suggestions so far, wrong driver, or public IP. I've had experience with both situations, unfortunately. Unless there are employees in the office at night or there is some odd piece of software that prints reports out at night, I'm leaning more to the public IP address.

One of our clients was foolish enough to assign a public IP to their C224e, and all hours of the day and night it would spit out pages of random garbage that looked just like that.

[B0265]

A few years back we had some cases where the printer at customers sites that had port 9100 open in the router was spitting ut pages with the text "your printer is part of a flaming botnet".

[Bix]

A few years back we had some cases where the printer at customers sites that had port 9100 open in the router was spitting ut pages with the text "your printer is part of a flaming botnet".

"Hello, here the printer is possessed!"
😂😂😂😂😂

[Lync]

Change the IP address of the printer, someone on the network has probably got an old print driver installed that is pointing to this IP address. (Hopefully it is not a public IP)

[CopiertechmyA@@]

had the same thing happen with with an end user with toshiba. the end user has something trying to send to the printer driver with no driver. this is a self protecting thing. something is trying to talk to the printer without knowing what it is say. to the printer. change themip and maybe put user codes for safety.

[jotunn]

There is one more possibility - improperly configured network management software.
Last year we've had a customer with such problem, trying to blame faulty machines.

Some links describing problem:
All network printers are printing gobblety-gook. Starts with GET /HTTP/1.0 - Spiceworks (https://community.spiceworks.com/topic/515109-all-network-printers-are-printing-gobblety-gook-starts-with-get-http-1-0)
https://success.alienvault.com/s/question/0D50Z00008oGsT2SAK/va-triggering-ip-printer-to-print-out-pages-of-random-text
had a couple of network printers printout HTTP / 1.0/ GET HELP - what is this - Spiceworks General Support - Spiceworks (https://community.spiceworks.com/topic/250248-had-a-couple-of-network-printers-printout-http-1-0-get-help-what-is-this)