Re: Increase in Sun RPC Scans

• Previous message: Joe Hamelin: "Re: Increase in Sun RPC Scans"
• In reply to: Joe Hamelin: "Re: Increase in Sun RPC Scans"
• Next in thread: Lance Spitzner: "Repeated LPR attacks against wrong OS"
• Next in thread: Jason Boyer: "Re: Increase in Sun RPC Scans"
• Reply: Lance Spitzner: "Repeated LPR attacks against wrong OS"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I had the same thing here over the past few days.  Initial SYN scans of the
network, then 350 + attempts to get into a staging NT server via 515 Linux
LPR exploit.   Odd.

Jim Forster
Network Administrator
RapidNet, Inc.
-----------------------------------
http://www.snort.org

----- Original Message -----
From: Joe Hamelin <joeat_private>
To: <INCIDENTSat_private>
Sent: Friday, April 20, 2001 11:05 AM
Subject: Re: Increase in Sun RPC Scans


> On Thu, 19 Apr 2001, Randy Johnson wrote:
>
> :I was also hit by a couple of IPs attempting to compromise my machine
> :via LPD (port 515.)
>
> I've been getting about one or two a day myself.  Funny thing is that
> they keep trying to hit the only Windoze box on the network :)
>
> -Joe
>
>
> --
>  ------------------------------------------------------------------
> |     Joe Hamelin  <joeat_private>  Edmonds, Washington, US      |
> |              Senior Network Engineer, Amazon.com                 |
>  ------------------------------------------------------------------

• Next message: Ovanes Manucharyan: "shell.exe"
• Previous message: Joe Hamelin: "Re: Increase in Sun RPC Scans"
• In reply to: Joe Hamelin: "Re: Increase in Sun RPC Scans"
• Next in thread: Lance Spitzner: "Repeated LPR attacks against wrong OS"
• Next in thread: Jason Boyer: "Re: Increase in Sun RPC Scans"
• Reply: Lance Spitzner: "Repeated LPR attacks against wrong OS"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 20 2001 - 18:50:14 PDT