RPC scans

From: Jonathan Rickman (jonathan@xcorps.net)
Date: 08/14/02 

Date: Tue, 13 Aug 2002 18:11:10 -0400 (EDT)
From: Jonathan Rickman <jonathan@xcorps.net>
To: <incidents@securityfocus.com>

Business is starting to pick up here in my little corner of the net. 111
has been the favorite target for passing scanners for the last 4 hours now
and the frequency seems to be increasing. Interestingly enough, most of
the IP addresses is a dshield repeat offender for RPC scans. Out of 139
individual hosts, so far all but two have been in China. One was good old
.kr and another was an Aussie. Am I alone here, or is something
coordinated/distributed going on? 

-- 
Jonathan Rickman
X Corps Security
http://www.xcorps.net

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Relevant Pages

  • Re: Time to CounterSPam ?
    ... "Utilisateur PC Libre Service" wrote in message ... businesses to become a target of a DOS attack. ... my educated guess is that most of these spam websites are running on ... hacked PCs (personal or business), and the owners have no idea it's running. ...
    (comp.programming)
  • Re: Duhg the nonce
    ... > I have an issue with workers being targetted along with their families, ... Co. Meath that he has agreed to close down his business in April ... >>> As thousands of frogs are taken from the wild every month and tortured ... >>> welfarists for rescue use he will remain a legitimate target. ...
    (uk.transport)
  • Re: CreateShortcut problem
    ... The code does produce a correct *looking* shortcut (Target ... | Plains v8\Dynamics.exe" ...
    (microsoft.public.windows.server.scripting)
  • Re: small stores and Martin
    ... Companies that are driven by their investors - and hence controlled by ... I may be naive as far as business is concerned, but I can't see for the ... We are getting a Target! ... get what I want there and avoid people. ...
    (rec.music.makers.guitar.acoustic)
  • Re: displaytag column : how to specify a different target?
    ... specify a different target in a displaytag url". ... but is this frames based web-application for ... Can they afford to lose the business? ... I suspect your employers have their heads 'stuck ...
    (comp.lang.java.programmer)