Security Incidents mailing list archives

FTP back in Vogue?


From: "leon" <leon () inyc com>
Date: Wed, 13 Mar 2002 14:59:29 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi everyone,

Just curious if there is something going on with ftp.  Seem to be
getting scanned quite a bit for it (all different networks).  Not
sure if the ips are static or dynamic.  This is a machine running
zonelarm on it.  Haven't seen this many probes in a short time since
the wu-ftpd vuln.

The firewall has blocked Internet access to your computer (FTP) from
24.190.34.140 (FTP) [TCP Flags: S].

Time: 3/13/2002 11:50:02 AM

The firewall has blocked Internet access to your computer (FTP) from
195.55.99.89 (TCP Port 3178) [TCP Flags: S].

Time: 3/13/2002 1:31:58 PM

The firewall has blocked Internet access to your computer (FTP) from
80.133.117.45 (TCP Port 3650) [TCP Flags: S].

Time: 3/13/2002 2:55:36 PM

The firewall has blocked Internet access to your computer (FTP) from
63.133.117.45 (TCP Port 2792) [TCP Flags: S].

Time: 3/13/2002 2:58:42 PM

Regards,

Leon

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPI+vodqAgf0xoaEuEQIFuwCbBmcw88WnPPeVGjcRnqTpbD1XazQAoIg+
D5ZDMeQaP3bDLkFhc34yb1Cs
=POEh
-----END PGP SIGNATURE-----


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: