Jason Lewis wrote: > Anyone else seeing an increase in SunRPC (port 111) scans? Several networks > I manage are getting scanned from lots of different hosts. > > The scans are random IP's on the same subnet, I guess to evade IDS? I see a lot of sunrpc scan's over the last few months on my honeypot but can't say they are increasing. Since April 6 this honeypot was scaned 14 times for sunrpc from different hosts, 15 times for bind, 11 times for ftp and 6 times for lpr. regards, Martin -- Martin Markgraf Rien Informationssysteme AG fon: +49 2841 9083061 Eurotec-Ring 15 fax: +49 2841 9083069 D-47445 Moers http://www.rien-ag.de mm@rien-ag.de
This archive was generated by hypermail 2b30 : Thu Apr 19 2001 - 07:35:31 PDT