Security Basics mailing list archives

SunRPC Outbound Probes


From: "John Smithson" <why1234 () hotmail com>
Date: Wed, 15 Oct 2003 02:50:50 -0700

Gurus,

Since yesterday evening we have notice few machines trying to go outbound to 216.65.91.114 on SunRPc (UDP) ports. Is there some sort of trojan on the box? THey shoud not be going outbound on this address on sunrpc service. We are blocking this specific oubound traffic on our firewall. howver, I'm seeing huge number of events are generated by this machines.

We have ran AV Scanner / Ad-aware all of them came empty on these machines. Machines varies on OS 9x and NT, OS.

Can someone help me figure out what is going on??

Thanks

_________________________________________________________________
Want to check if your PC is virus-infected? Get a FREE computer virus scan online from McAfee. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: