Security Incidents mailing list archives

big increase in ftp scanning


From: Ian Eure <ieure () SICKFUCK ORG>
Date: Sun, 29 Oct 2000 15:58:56 -0800

i've seen a ton of ftp scans in the last week.

they have come from:

62.226.217.222 (p3EE2D9DE.dip.t-dialin.net)
64.209.232.25 (isengard.iad4.gctr.net)
62.20.37.140 (basecamp.gotland.se)
24.28.122.195 (cs28122-195.houston.rr.com)
24.162.74.203 (cs16274-203.austin.rr.com)

all this has been in the last week. i run wu-ftpd 2.6.0, with a backport
of the fix from 2.6.1. high risk, but there's no anonymous account, and no
untrusted users have access to ftp.

somewhat OT, can someone recommend a more secure ftpd? it seems like
almost all of the ftp daemons had (have?) bad security problems.

--
 ______________________________________________
| "the whole scale of cosmic dimensions are falling from my mouth
| in the description of a kiss of the interimlovers"
|   - einsturzende neubaten, "interim"


Current thread: