Re: FTP scans from wanadoo.fr

[Dave Morris <trojan1 () vizzavi net>]

In-Reply-To: <030701c187f2$f134cf90$4a01a8c0 () cipher com br>

I've noticed the same activity from this ISP.  The only 
difference I have noticed is with each attack, we get 
one single bad FTP attempt amongst a hoard of eeye-
retina scans (anywhere between 10,000 to 60,000 of 
them).  I'm not sure whether the FTP attempt is part 
of that scanning program or whether it's simply an 
attempt to mask the activity with a blur of alerts.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com