[EMAIL PROTECTED] wrote:
>
> I have been noticing an unusual number of probes to these ports recently.
> I am guessing the 515 target is a solaris printer service overflow bug
> mentioned on www.securityfocus.com last week, but I am not sure what is
> attracting so many to the 111 (sunrpc) port.
On Thu, 28 Jun 2001, Billy Jacobs wrote:
> I have been seeing the same thing as of late. Just went through my
> email reports, and it seems like I am getting hit mostly from the
> following addresses on ports 111 and 515:
>
> (sorted / uniq-ed)
> 24.93.164.129:2555 ---> my.ip.add.ress:111
a1-1
Billy Jacobs wrote:
> I have been seeing the same thing as of late. Just went through my
> email reports, and it seems like I am getting hit mostly from the
> following addresses on ports 111 and 515:
Port 111 is the RPC port, which hosts things like NIS (security risk)
and NFS (security risk).
PROTECTED]]On Behalf Of
> > [EMAIL PROTECTED]
> > Sent: donderdag 28 juni 2001 7:38
> > To: [EMAIL PROTECTED]
> > Subject: [Leaf-user] [chatter] Flurry of probes to ports 111 and
> 515?
> >
> >
> > I have been noticing an unusual number of probes to these
wo
ports.
Stefaan
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> [EMAIL PROTECTED]
> Sent: donderdag 28 juni 2001 7:38
> To: [EMAIL PROTECTED]
> Subject: [Leaf-user] [chatter] Flurry of probes to ports 111 and 515?
>
>
I have been noticing an unusual number of probes to these ports recently.
I am guessing the 515 target is a solaris printer service overflow bug
mentioned on www.securityfocus.com last week, but I am not sure what is
attracting so many to the 111 (sunrpc) port.
---
