Re: FTP scans from wanadoo.fr

From: Dave Morris (trojan1@vizzavi.net)
Date: 12/20/01 

Date: 20 Dec 2001 07:38:10 -0000
From: Dave Morris <trojan1@vizzavi.net>
To: incidents@securityfocus.com
('binary' encoding is not supported, stored as-is)

In-Reply-To: <030701c187f2$f134cf90$4a01a8c0@cipher.com.br>

I've noticed the same activity from this ISP. The only
difference I have noticed is with each attack, we get
one single bad FTP attempt amongst a hoard of eeye-
retina scans (anywhere between 10,000 to 60,000 of
them). I'm not sure whether the FTP attempt is part
of that scanning program or whether it's simply an
attempt to mask the activity with a blur of alerts.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

Relevant Pages

  • [NT] Multiple Vulnerabilities Found in PlatinumFTPserver
    ... A vulnerability in the product allows remote attackers to cause the server ... to traverse into directories that reside outside the bounding FTP root ... delete files and perform a DoS attack on the server. ... 200 PORT command successful ...
    (Securiteam)
  • Re: last 24 hour port scan log
    ... > users,some small businesses) are even bigger morons because their users ftp ... Just because a small business doesn't have the funds to ensure a secure ... it is up to the ISP to protect their network and provide ...
    (comp.security.firewalls)
  • Re: Contact Form Problems
    ... It appears that the ISP does not support FPSE driven forms. ... I use FTP when you publish your site to your ... Upload the root file from your computer to ... and thought I was OK since I was first publishing to ...
    (microsoft.public.publisher.webdesign)
  • Re: Speaking of FTP...
    ... In this particular case the ISP says no FTP because it's insecure, ... > FTP servers are a frequent target of hackers and one hacked server alone ...
    (microsoft.public.security)
  • Re: Networking
    ... You'll need to find out what TCP/IP address your ISP has assigned you (this ... >> The second thing you need is to configure your router to pass-through FTP ... >> * PLEASE post all messages and replies in the newsgroups ...
    (microsoft.public.windowsxp.network_web)