Security Incidents: Re: ftp directory scan

From: Michael Katz <mike_at_procinct.com>
Date: Mon, 08 Jul 2002 08:44:00 -0700

At 7/8/2002 06:17 AM, harston wrote:

>pb211.wieliczka.sdi.tpnet.pl UNKNOWN nobody [07/Jul/2002:00:52:17 +0200]
>"USER anonymous" 331 -
>pb211.wieliczka.sdi.tpnet.pl UNKNOWN ftp [07/Jul/2002:00:52:18 +0200]
>"PASS Wgpuser_at_home.com" 230 -

You appear to have been scanned with a tool known as Grim's Ping
(http://grimsping.cjb.net/). This tool is commonly used to find poorly
configured FTP servers where people can store their warez, porn, MP3s, etc.

Michael Katz
mike_at_procinct.com
Procinct Security

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
Received on Jul 08 2002