Security Incidents mailing list archives
Re: anyone else seen an increase in sunrpc scans these days?
From: Alfred Huger <ah () SECURITYFOCUS COM>
Date: Mon, 15 Jan 2001 13:33:24 -0800
I am seeing much the same here: 24.22.169.216 c304765-a.ftclns1.co.home.com 2 2 Generic Unix Portmapper Dump RPC Probe 1/7/2001 05:32.0 -- -- -- 24.23.165.189 cj493971-a.reston1.va.home.com 1 1 Generic Unix Portmapper Dump RPC Probe 1/2/2001 06:25.0 -- -- -- 24.70.222.168 h24-70-222-168.cc.shawcable.NET 2 2 Generic Unix Portmapper Dump RPC Probe 1/6/2001 06:11.0 -- -- -- 24.108.84.147 c62738-013.powersurfr.com 2 2 Generic Unix Portmapper Dump RPC Probe 1/5/2001 19:41.0 -- -- -- 24.167.61.7 cs16761-7.houston.rr.com 1 1 Generic Unix Portmapper Dump RPC Probe 1/6/2001 10:16.0 -- -- -- 24.169.15.21 cm-24-169-15-21.nycap.rr.com 1 1 Generic Unix Portmapper Dump RPC Probe 1/2/2001 23:41.0 -- -- -- 24.232.3.116 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/16/2000 08:57.0 -- -- -- 63.109.62.181 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/14/2000 17:42.0 -- -- -- 63.147.167.5 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/26/2000 01:50.0 -- -- -- 63.216.196.88 63-216-196-88.sdsl.cais.NET 1 1 Generic Unix Portmapper Dump RPC Probe 12/29/2000 18:46.0 -- -- -- 64.65.56.56 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/26/2000 20:36.0 -- -- -- 64.217.251.190 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/18/2000 18:08.0 -- -- -- 148.243.237.132 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/25/2000 00:33.0 -- -- -- 193.136.60.28 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 1/6/2001 08:31.0 -- -- -- 202.138.156.11 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/25/2000 02:32.0 -- -- -- 207.63.16.35 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/24/2000 15:57.0 -- -- -- 208.35.4.25 testbox.cityweyed.NET 2 2 Generic Unix Portmapper Dump RPC Probe 1/2/2001 09:26.0 -- -- -- 208.41.172.98 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/14/2000 03:08.0 -- -- -- 211.34.155.33 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/19/2000 13:25.0 -- -- -- 211.46.98.129 - not found - 1 1 Generic Unix Portmapper Dump RPC Probe 12/20/2000 00:34.0 "Vae Victis" SecurityFocus.com
Current thread:
- Re: FTP and RPC based worms [was anyone else ...], (continued)
- Re: FTP and RPC based worms [was anyone else ...] Royans K Tharakan (Jan 15)
- Re: FTP and RPC based worms [was anyone else ...] slim bones (Jan 16)
- Ramen worm . More details on it. ( found a password and e-mails crypted inside it) Mihai Moldovanu (Jan 16)
- Re: Ramen worm . More details on it. ( found a password and e-mails crypted inside it) Jeffrey F. Lawhorn (Jan 16)
- Re: Ramen worm . More details on it. ( found a password and e-mails crypted inside it) Daniel Martin (Jan 16)
- Re: FTP and RPC based worms [was anyone else ...] Steve Clement (Jan 16)
- Rise in rpc scans - Honeynet Project Lance Spitzner (Jan 15)