Re: Increase in Sun RPC Scans

From: Chris Arnold (chris.arnoldat_private)
Date: Wed Apr 18 2001 - 21:58:55 PDT

Next message: Russell Fulton: "More weird scans"

Previous message: Anders Thulin: "Re: non-routable Scan?"
Maybe in reply to: Jason Lewis: "Increase in Sun RPC Scans"
Next in thread: Arthur Donkers: "Re: Increase in Sun RPC Scans"
Next in thread: Jason Boyer: "Re: Increase in Sun RPC Scans"
Reply: Arthur Donkers: "Re: Increase in Sun RPC Scans"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

A severe increase as well as a major increase in ports in the 32k range.

Chris

-----Original Message-----
From: Jason Lewis
To: INCIDENTSat_private
Sent: 4/18/01 11:28 PM
Subject: Increase in Sun RPC Scans

Anyone else seeing an increase in SunRPC (port 111) scans?  Several
networks
I manage are getting scanned from lots of different hosts.

The scans are random IP's on the same subnet, I guess to evade IDS?

Jason Lewis
http://www.rivalpath.com
"All you can do is manage the risks. There is no security."

Next message: Russell Fulton: "More weird scans"
Previous message: Anders Thulin: "Re: non-routable Scan?"
Maybe in reply to: Jason Lewis: "Increase in Sun RPC Scans"
Next in thread: Arthur Donkers: "Re: Increase in Sun RPC Scans"
Next in thread: Jason Boyer: "Re: Increase in Sun RPC Scans"
Reply: Arthur Donkers: "Re: Increase in Sun RPC Scans"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Apr 19 2001 - 07:57:29 PDT