Security Incidents mailing list archives
Re: anyone else seen an increase in sunrpc scans these days?
From: Devdas Bhagat <devdas () WORLDGATEIN NET>
Date: Mon, 15 Jan 2001 12:50:22 +0530
On Mon, 15 Jan 2001, Jason Lewis spewed into the ether:
I couldn't find any of those addresses, but I have similar scans in my logs. 63.91.6.36 64.32.209.213 64.21.114.2 66.22.62.2 216.98.160.251 Last 24 hours....all the above IP's are looking for Sun RPC.
I got the same, and the originals. Ports: 23, 111, 119, 143, 12345, 31337 The 64.* and 211.* come over twice a day, about 9 hours apart. Mail to domain contacts has had no response for over a month. Devdas Bhagat -- "Open Channel D..." -- Napoleon Solo, The Man From U.N.C.L.E.
Current thread:
- Re: anyone else seen an increase in sunrpc scans these days? Ray Simard (Jan 15)
- <Possible follow-ups>
- Re: anyone else seen an increase in sunrpc scans these days? Steve Buttgereit (Jan 15)
- Re: anyone else seen an increase in sunrpc scans these days? Derek Kwan (Jan 15)
- Re: anyone else seen an increase in sunrpc scans these days? Brian Taylor (Jan 15)
- Re: anyone else seen an increase in sunrpc scans these days? Matthew Hallacy (Jan 15)
- Re: anyone else seen an increase in sunrpc scans these days? Devdas Bhagat (Jan 15)
- Re: anyone else seen an increase in sunrpc scans these days? Cristian Dumitrescu (Jan 15)
- sunrpc / wu-ftpd worm ? Mihai Moldovanu (Jan 15)
- Re: anyone else seen an increase in sunrpc scans these days? Digital Overdrive (Jan 16)
- Re: anyone else seen an increase in sunrpc scans these days? Cristian Dumitrescu (Jan 16)
- Re: anyone else seen an increase in sunrpc scans these days? Nathan W. Lindstrom (Jan 16)
- Re: anyone else seen an increase in sunrpc scans these days? Ignacio Machin (Jan 18)
- Re: anyone else seen an increase in sunrpc scans these days? razor (Jan 18)
- Re: anyone else seen an increase in sunrpc scans these days? Ignacio Machin (Jan 22)
- FTP and RPC based worms [was anyone else ...] Russell Fulton (Jan 15)