Snort mailing list archives
Failed FTP login signature
From: "Atkins, Dwane P" <ATKINSD () uthscsa edu>
Date: Wed, 23 May 2007 09:12:50 -0500
In an attempt to possible thwart attacks prior to arriving a the desktop, we are looking for a signature that would alert us as to when someone is trying to FTP or SSH into a system on our network. I am thinking that if someone has typed in 5 or 6 passwords and has not connected, then they certainly do not have a need to be there. Does anyone out there have a signature for this type of incident? We would probably be looking at Telnet, SSH, FTP and possible HTTP. Thanks Dwane Dwane Atkins 210-567-0158 <mailto:atkinsd () uthscsa edu>
------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Failed FTP login signature Atkins, Dwane P (May 23)
- Message not available
- Fwd: Failed FTP login signature Christopher (May 23)
- Re: Fwd: Failed FTP login signature Daniel Cid (May 28)
- Fwd: Failed FTP login signature Christopher (May 23)
- Message not available