I to have seen an increase in sunrpc scans coming from these ips:

65.26.195.191 (okc-65-26-195-191.mmcable.com)
64.123.19.28 (adsl-64-123-19-28.dsl.austtx.swbell.net)
64.2.219.110 (w110.z064002219.slc-ut.dsl.cnc.net)
66.20.108.106 (adsl-20-108-106.bna.bellsouth.net)
202.20.67.1 (ram1.ru.ac.th)
208.53.45.194 (host-2085345194.bluestar.net)
63.111.226.6 (smo01.volfirst.net)
63.202.145.170 (jjjjs.com)
24.42.168.87 (cr979351-a.bloor1.on.wave.home.com)
207.202.238.96 (ip96.usw20.rb1.bel.nwlink.com)
158.144.18.52 (looks like it's owned by !net-tifrnet (tifr.res.in))
211.5.191.200 (looks like it's owned by Nanbu Engineering Co, Ltd in
Osaka, Japan)
4.3.192.245 (lsanca1-192-245.dsl.gtei.net)

... the list goes on.. but that's just a sample of all the people scanning
for open sunrpc ports.

    .~. --------------------------------------------------
    /V\ James Bryan Brentwood, TN
   // \\ jhbryanpenguintowne.com
  // \\ http://www.penguintowne.com/
/( )\ PGP Key: http://www.penguintowne.com/pgp.html
   ^`~'^ ------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]