Security Incidents: Re: ftp directory scan

[Michael Katz <mike () procinct com>]

At 7/8/2002 06:17 AM, harston wrote:

> pb211.wieliczka.sdi.tpnet.pl UNKNOWN nobody [07/Jul/2002:00:52:17 +0200] 
> "USER anonymous" 331 -
> pb211.wieliczka.sdi.tpnet.pl UNKNOWN ftp [07/Jul/2002:00:52:18 +0200] 
> "PASS Wgpuser () home com" 230 -
You appear to have been scanned with a tool known as Grim's Ping 
(http://grimsping.cjb.net/).  This tool is commonly used to find poorly 
configured FTP servers where people can store their warez, porn, MP3s, etc.
Michael Katz
mike () procinct com
Procinct Security


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com