Security Incidents mailing list archives

Re: Crazy port 111 scans

From: "Lic. Rodolfo Gonzalez Gonzalez" <rgg () SOLARIUM CS BUAP MX>
Date: Tue, 6 Feb 2001 00:34:53 -0600

On Mon, 5 Feb 2001, Reeves, Mike wrote:

I have had more 111 scans this past 5 days than in the last 2 months. Is
there some new RPC exploit or something?
Anyone else seeing these hosts?


It could be Ramen, couldn't be?. I've seen tons of scans to 111 and 515
and 21 :o

Regards.

Current thread:

Crazy port 111 scans Reeves, Mike (Feb 05)
- Re: Crazy port 111 scans Lic. Rodolfo Gonzalez Gonzalez (Feb 06)
  - Re: Crazy port 111 scans hostmaster (Feb 06)
  - DNS server crashed Jason Lewis (Feb 06)
    - Re: DNS server crashed Michael Boman (Feb 06)
    - Re: DNS server crashed Phil Brutsche (Feb 06)
    - A question of intent / DHCP poison attack? Conor Crowley (Feb 06)
    - Re: A question of intent / DHCP poison attack? Ryan Russell (Feb 07)
    - Re: A question of intent / DHCP poison attack? Valdis Kletnieks (Feb 07)
    - Re: DNS server crashed Greg A. Woods (Feb 07)
    - Re: DNS server crashed Jeremy Hanmer (Feb 06)
    - Re: DNS server crashed Steve Stearns (Feb 06)

(Thread continues...)