Full Disclosure mailing list archives
Re: repeated port 21 attempts
From: "Andrew Farmer" <andfarm () gmail com>
Date: Wed, 14 Jun 2006 09:10:41 -0700
On 6/13/06, Ken Dunham <dunhamk () rica net> wrote:
>> I'm getting port 21 connection attempts every 5 minutes from about > half a dozen of my network users. Hi, Sounds like FTP and SSH attacks that are opportunistically launched by Romanian attackers to date...
Given that the connections coming from his own network, I seriously doubt the FTP connection attempts are the work of "Romanian hackers". (Unless Mr. Wu's network is in Romania.) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- repeated port 21 attempts Jacob Wu (Jun 12)
- Re: repeated port 21 attempts Rodrigo Barbosa (Jun 12)
- Re: repeated port 21 attempts Matt Venzke (Jun 12)
- Re: repeated port 21 attempts pwnd . security . pwnd (Jun 13)
- RE: repeated port 21 attempts Ken Dunham (Jun 13)
- Re: repeated port 21 attempts Andrew Farmer (Jun 14)
- RE: repeated port 21 attempts Ken Dunham (Jun 13)
- <Possible follow-ups>
- Re: Re: repeated port 21 attempts Jacob Wu (Jun 13)
- Re: Re: repeated port 21 attempts Andrew Farmer (Jun 13)
- RE: Re: repeated port 21 attempts Jacob Wu (Jun 13)
- Re: repeated port 21 attempts Cardoso (Jun 13)