|
Security Incidents
mailing list archives
Re: SNMP Scans
From: Chris Schuler <cschuler () MINDLEADERS COM>
Date: Tue, 13 Mar 2001 11:05:15 -0500
anyone else seeing port 111/rpc scans from this ip?
211.185.160.193
Ive seen at least two walks of my ip address space by this host.
Mar 13 09:45:08 211.185.160.193:4671 -> xxx.xxx.xxx.xxx:111 SYN ******S*
Mar 13 09:45:08 211.185.160.193:4670 -> xxx.xxx.xxx.xxx:111 SYN ******S*
Mar 13 09:45:08 211.185.160.193:4672 -> xxx.xxx.xxx.xxx:111 SYN ******S*
...
By Date
By Thread
Current thread:
|