Re: anyone else seen an increase in sunrpc scans these days?

[Matthew Hallacy <mhallacy () MERCURY XTRATYME COM>]

I've had these addresses nmap at least one of our network blocks in the
past 24-48 hours:

151.36.192.130
203.199.75.156
203.66.191.201
208.177.150.213
210.235.103.210
210.240.238.59
211.47.221.37
211.47.221.7
212.93.130.115
24.9.120.8
63.200.250.150
64.229.193.243
64.248.82.38

Hats off to sprint for putting us in the middle of a block that they
usually pass out to cable modem providers.


                                Matthew S. Hallacy
                                XtraTyme Technologies
                                Systems/Network Administrator

On Mon, 15 Jan 2001, Jason Lewis wrote:

> I couldn't find any of those addresses, but I have similar scans in my logs.
>
> 63.91.6.36
> 64.32.209.213
> 64.21.114.2
> 66.22.62.2
> 216.98.160.251
[snip]
> -----Original Message-----
> From: Incidents Mailing List [mailto:INCIDENTS () SECURITYFOCUS COM]On
> Behalf Of Alex Popa
[snip]
> 24.26.121.156
> 24.168.66.119
> 64.31.226.156
> 142.169.227.102
> 193.226.15.15
> 211.218.144.11