Security Incidents mailing list archives
Re: FTP scans from wanadoo.fr
From: Dave Morris <trojan1 () vizzavi net>
Date: 20 Dec 2001 07:38:10 -0000
In-Reply-To: <030701c187f2$f134cf90$4a01a8c0 () cipher com br> I've noticed the same activity from this ISP. The only difference I have noticed is with each attack, we get one single bad FTP attempt amongst a hoard of eeye- retina scans (anywhere between 10,000 to 60,000 of them). I'm not sure whether the FTP attempt is part of that scanning program or whether it's simply an attempt to mask the activity with a blur of alerts. ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Re: FTP scans from wanadoo.fr, (continued)
- Re: FTP scans from wanadoo.fr loon (Dec 17)
- Re: FTP scans from wanadoo.fr Phil (Dec 17)
- Re: FTP scans from wanadoo.fr Replugge [Rod] (Dec 18)
- Re: FTP scans from wanadoo.fr dr john halewood (Dec 18)
- Re: FTP scans from wanadoo.fr Alexandre Pinto (Dec 18)
- Re: FTP scans from wanadoo.fr - MOre info Replugge [Rod] (Dec 18)
- Re: FTP scans from wanadoo.fr - MOre info Pieter-Bas IJdens (Dec 19)
- Re: FTP scans from wanadoo.fr Emil Popov (Dec 20)
- FTP scans from wanadoo.fr Gray, Patrick (ISS Atlanta) (Dec 17)
- RE: FTP scans from wanadoo.fr Barber, Chris (Dec 18)
- Re: FTP scans from wanadoo.fr Dave Morris (Dec 20)
- Re: FTP scans from wanadoo.fr loon (Dec 17)