Full Disclosure mailing list archives
repeated port 21 attempts
From: Jacob Wu <Wu () AUX UWM EDU>
Date: Mon, 12 Jun 2006 16:30:40 -0500
I'm getting port 21 connection attempts every 5 minutes from about half a dozen of my network users. These attempts are repeating regularly with one computer sending out 1500+ attempts a day. I have not seen this before and I'm wondering if anyone else here has seen a client behave this way before? My initial thoughts were: hacker, virus/trojan/spyware or badly configured program. I ruled hacker out right away when talking to the clients and realizing they didn't even understand the concept of ports. After receiving the machines from the clients and doing vigorous virus/trojan/spyware scans I have found nothing known on them. Anyone got anything? Is this something new or just new to me? _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- repeated port 21 attempts Jacob Wu (Jun 12)
- Re: repeated port 21 attempts Rodrigo Barbosa (Jun 12)
- Re: repeated port 21 attempts Matt Venzke (Jun 12)
- Re: repeated port 21 attempts pwnd . security . pwnd (Jun 13)
- RE: repeated port 21 attempts Ken Dunham (Jun 13)
- Re: repeated port 21 attempts Andrew Farmer (Jun 14)
- RE: repeated port 21 attempts Ken Dunham (Jun 13)
- <Possible follow-ups>
- Re: Re: repeated port 21 attempts Jacob Wu (Jun 13)
- Re: Re: repeated port 21 attempts Andrew Farmer (Jun 13)
- RE: Re: repeated port 21 attempts Jacob Wu (Jun 13)
- Re: repeated port 21 attempts Cardoso (Jun 13)