StnyFtpd

["Cam Beasley, ISO" <cam () AUSTIN UTEXAS EDU>]

FYI -- not sure if anyone else has noticed, but the
StnyFtpd daemon (usually linked to various IRCbots)
has a new and improved banner that you might want
to be looking for:

TCP=1024:
 '220 11111111 1111 j0'

Your IRCbot sigs should normally trigger before a rule
for this banner triggers, but..

~cam.

Cam Beasley, CISSP CIFI
InfoSec Operations Mgr
ITS/Information Security Office
University of Texas at Austin
cam () austin utexas edu
----------------------------
Report Abuse/Misuse to:
 - abuse () utexas edu
 - 512.475.9242 
----------------------------

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.