Re: anyone else seen an increase in sunrpc scans these days?

[Cristian Dumitrescu <omega () LUMINA RO>]

Hey
I've been experiencing the same kind of scans in the last 2 weeks, with
increased density in the last days, from these ip addreses:

211.120.63.136
213.154.132.122
210.205.6.215
24.114.48.24
62.83.125.82
193.231.199.4
193.40.223.66
65.3.3.83
193.230.227.234

Cristian Dumitrescu
omega () lumina ro

On Mon, 15 Jan 2001, Alex Popa wrote:

> In the last five days, the port scans to my entire class C have dramatically
> increased, from one per two days on average, to four yesterday and six today.
>
> Is there a new exploit around, or is there some sort of new worm out there?
>
> I might just be paranoid, but here are the addreses that have been looking
> for port 111 in the last 26 hours:
>
> 24.26.121.156
> 24.168.66.119
> 64.31.226.156
> 142.169.227.102
> 193.226.15.15
> 211.218.144.11
>
> ------------+------------------------------------------
> Alex Popa,  |  "Artificial Intelligence is
> razor () ldc ro|         no match for Natural Stupidity"
> ------------+------------------------------------------
> "It took the computing power of three C-64s to fly to the Moon.
> It takes a 486 to run Windows 95. Something is wrong here."