Re: Anyone know what scanner this is?

[Florian Kalb <flo () fafhrd de>]

On Sun, Dec 15, 2002 at 05:52:55PM -0500, Pez Mohr wrote:
>  A while ago I decided to set up an anonymous account on my FTP server with
> full access (read, write, create, delete, and the same access for
> subdirectories) on the dir C:\Trap to see what kind of traffic I'd get.
> Nothing much has happened for the past few months, until today, I found some
> uploads and downloads under the user 'anonymous'.

Hi,


> (001379) 12/15/2002 1:13:49 AM - anonymous (217.226.72.253) > STOR
> /1mbtest.ptf


do a google-lookup for '1mbtest.ptf' 
-> http://eyeonsecurity.org/papers/pubscanning.pdf 

the name of the scanner seems to be Grim's Ping

Flo

-- 
0976-"I'm not a number, I'm a free man!" {number six, prisoner}