Educause Security Discussion mailing list archives
StnyFtpd
From: "Cam Beasley, ISO" <cam () AUSTIN UTEXAS EDU>
Date: Tue, 15 Feb 2005 08:33:43 -0600
FYI -- not sure if anyone else has noticed, but the StnyFtpd daemon (usually linked to various IRCbots) has a new and improved banner that you might want to be looking for: TCP=1024: '220 11111111 1111 j0' Your IRCbot sigs should normally trigger before a rule for this banner triggers, but.. ~cam. Cam Beasley, CISSP CIFI InfoSec Operations Mgr ITS/Information Security Office University of Texas at Austin cam () austin utexas edu ---------------------------- Report Abuse/Misuse to: - abuse () utexas edu - 512.475.9242 ---------------------------- ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- StnyFtpd Cam Beasley, ISO (Feb 15)
- <Possible follow-ups>
- Re: StnyFtpd Justin Azoff (Feb 17)