Re: Increase in Sun RPC Scans

From: Prashanth Ram (pramat_private)
Date: Thu Apr 19 2001 - 08:29:34 PDT

  • Next message: Rick Robinson: "Re: Increase in Sun RPC Scans"

    I would not be alarmed 'cuz it's vacation time for students(High/Middle school)
    this month, in the US. So lots of kiddie scripts could be floating around..
    Just a thought for the rise in scans..
    -Prashanth
    
    Jason Boyer wrote:
    
    > I have seen around 3000+ over the last two days with similar things. Usually its
    > 2-3 different hosts at once at semi random times and everyone comes back with in
    > at least 24 hours of the first scan.
    >
    > Cheers,
    > J
    >
    > Jason Lewis wrote:
    >
    > > Anyone else seeing an increase in SunRPC (port 111) scans?  Several networks
    > > I manage are getting scanned from lots of different hosts.
    > >
    > > The scans are random IP's on the same subnet, I guess to evade IDS?
    > >
    > > Jason Lewis
    > > http://www.rivalpath.com
    > > "All you can do is manage the risks. There is no security."
    



    This archive was generated by hypermail 2b30 : Thu Apr 19 2001 - 09:45:47 PDT