Re: Strange FTP traffic...

[Helmut Springer <delta () FAVEVE UNI-STUTTGART DE>]

On Thu 2000-09-28 (15:33), Sean Sosik-Hamor wrote:
> getting around to remember to post it.  ;)  Is anyone familiar with
> this scan?  Just looks like a check for a world writable incoming.  I
someone looking for a site to store lateron retrieveable data, warez
for example.

> need to clear out the WaReZ puppies and VCD couriers every once in a
> while on this server, is this how they're finding me?

if you ftpd is misconfigured your incoming will allow upload and
download of files, maybe even the creation of 'hidden' directories.
if this is the case, as the log shows, you'll face a wonderful
increase of traffic...

any reasonable ftpd for anonymous uploads will support such things
as blocking directory creation, enforcing reasonable filenames,
chown/chmod files to local administrators and so on..

--
MfG/best regards, helmut springer
                                            delta () FaVeVe Uni-Stuttgart DE
        
                   "Freedom's just another word for nothing left to lose"