increase in scans for RPC

From: Todd Suiter (toddat_private)
Date: Tue Mar 19 2002 - 16:11:32 PST

Next message: David Ulevitch: "ORBZ shut down"

Previous message: Matthew F. Caldwell: "Major DNS cache poisoning at Verisign/WorldNIC"
Next in thread: Dan Irwin: "RE: increase in scans for RPC"
Reply: Dan Irwin: "RE: increase in scans for RPC"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Folks,

	We've seen a dramatic increase in syn scans against tcp 111, went
from a couple a week to over 11,000 in the past week. Has anyone else
seen an increase like this? Is there yet another new tool out, or is
this looking for one of the older 'sploits? is this rpc.cmsd?

t




----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: David Ulevitch: "ORBZ shut down"
Previous message: Matthew F. Caldwell: "Major DNS cache poisoning at Verisign/WorldNIC"
Next in thread: Dan Irwin: "RE: increase in scans for RPC"
Reply: Dan Irwin: "RE: increase in scans for RPC"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Mar 19 2002 - 20:47:53 PST