Security Basics mailing list archives

Re: Monitored.By.hAcxFtpScan

From: Thomas Sjögren <thomas () northernsecurity net>
Date: Wed, 4 Dec 2002 18:13:09 +0100

On Tuesday 03 December 2002 20.52, Joris De Donder wrote:

I found a un-managed ftp server floating around our network.

I am quite sure the machine itself had not been compromised
completely, but I found a directory in there with the above name.


If you really interested in knowing what's going on isolate the server 
from your network and turn it into a honeypot.

/Thomas
-- 
thomas () northernsecurity net
thomas () se linux org

Current thread:

Monitored.By.hAcxFtpScan James McGee (Dec 03)
- Re: Monitored.By.hAcxFtpScan Gene Barlow (Dec 05)
  - Re: Monitored.By.hAcxFtpScan Thomas Sjögren (Dec 06)
- Re: Monitored.By.hAcxFtpScan news (Dec 05)
- <Possible follow-ups>
- RE: Monitored.By.hAcxFtpScan Krueger Lawrence (Dec 04)
- Monitored.By.hAcxFtpScan charles lindsay (Dec 04)
- Re: Monitored.By.hAcxFtpScan Joris De Donder (Dec 04)
  - Re: Monitored.By.hAcxFtpScan Thomas Sjögren (Dec 05)
- re: Monitored.By.hAcxFtpScan H C (Dec 04)
- Re: Monitored.By.hAcxFtpScan khayes (Dec 06)