Re: ftp

From: Anton A. Chuvakin (antonat_private)
Date: Wed Apr 24 2002 - 09:39:34 PDT

Next message: H C: "Re: Big traffic on 412/tcp"

Previous message: Ian Stoba: "Re: Big traffic on 412/tcp"
In reply to: gregory.kaneat_private: "ftp"
Next in thread: Kent Hundley: "RE: ftp"
Reply: Kent Hundley: "RE: ftp"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello Greg and all,

>Has anyone seen a recent increase in FTP attempts? I am getting hit all
We have a huge increase of FTP scans on our honeynet (hundreds per day).
They are likely produced by Linux Wu-FTPD autorooter (hits wu-ftpd up to
2.6.1, e.g. Linux RedHat up to 7.2). The software ('autowu v1.0') default
mode is to hit a B-class...

Best regards,
-- 
     Anton A. Chuvakin, Ph.D.
     http://www.chuvakin.org
   http://www.info-secure.org


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: H C: "Re: Big traffic on 412/tcp"
Previous message: Ian Stoba: "Re: Big traffic on 412/tcp"
In reply to: gregory.kaneat_private: "ftp"
Next in thread: Kent Hundley: "RE: ftp"
Reply: Kent Hundley: "RE: ftp"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Apr 24 2002 - 10:00:29 PDT