Re: Increase in Sun RPC Scans

From: Jason Boyer (jasonat_private)
Date: Thu Apr 19 2001 - 04:41:36 PDT

Next message: Vitaly Osipov: "Re: 31337 udp, on cisco...?"

Previous message: Russell Fulton: "More weird scans"
In reply to: Jason Lewis: "Increase in Sun RPC Scans"
Next in thread: Joseph Nicholas Yarbrough: "Re: Increase in Sun RPC Scans"
Next in thread: Mike Fetherston: "Re: Increase in Sun RPC Scans"
Reply: Joseph Nicholas Yarbrough: "Re: Increase in Sun RPC Scans"
Reply: Prashanth Ram: "Re: Increase in Sun RPC Scans"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I have seen around 3000+ over the last two days with similar things. Usually its
2-3 different hosts at once at semi random times and everyone comes back with in
at least 24 hours of the first scan.

Cheers,
J

Jason Lewis wrote:

> Anyone else seeing an increase in SunRPC (port 111) scans?  Several networks
> I manage are getting scanned from lots of different hosts.
>
> The scans are random IP's on the same subnet, I guess to evade IDS?
>
> Jason Lewis
> http://www.rivalpath.com
> "All you can do is manage the risks. There is no security."

Next message: Vitaly Osipov: "Re: 31337 udp, on cisco...?"
Previous message: Russell Fulton: "More weird scans"
In reply to: Jason Lewis: "Increase in Sun RPC Scans"
Next in thread: Joseph Nicholas Yarbrough: "Re: Increase in Sun RPC Scans"
Next in thread: Mike Fetherston: "Re: Increase in Sun RPC Scans"
Reply: Joseph Nicholas Yarbrough: "Re: Increase in Sun RPC Scans"
Reply: Prashanth Ram: "Re: Increase in Sun RPC Scans"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Apr 19 2001 - 08:14:11 PDT