Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Jul 1999 21:34:10 -0400 (EDT)
From:      Barrett Richardson <barrett@phoenix.aye.net>
To:        cjclark@home.com
Cc:        freebsd-security@freebsd.org
Subject:   Re: Failed FTP Attempts
Message-ID:  <Pine.BSF.4.01.9907062124480.6134-100000@phoenix.aye.net>
In-Reply-To: <199907061737.NAA19710@cc942873-a.ewndsr1.nj.home.com>

next in thread | previous in thread | raw e-mail | index | archive | help


On Tue, 6 Jul 1999, Crist J. Clark wrote:

> Hmmm... noticed these in my logs:
> 
> Jul  6 10:05:37 cc942873-a ftpd[19216]: connection from lon-c45-001-vty4.as.wcom.net (195.232.2.4)
> Jul  6 10:05:37 cc942873-a ftpd[19216]: ANONYMOUS FTP LOGIN REFUSED FROM lon-c45-001-vty4.as.wcom.net
> Jul  6 10:05:37 cc942873-a ftpd[19216]: FTP LOGIN FAILED FROM lon-c45-001-vty4.as.wcom.net, mp3
> Jul  6 10:05:38 cc942873-a ftpd[19216]: FTP LOGIN FAILED FROM lon-c45-001-vty4.as.wcom.net, warez
> Jul  6 10:05:40 cc942873-a ftpd[19216]: FTP LOGIN FAILED FROM lon-c45-001-vty4.as.wcom.net, leech
> 

I've seen attempted logins for warez and leech on my machine also. A guess
is that these are accounts typically set up by script kiddies that have
been able to add accounts on systems. They must use those account names
to store and trade their pirated goodies.

-

Barrett



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.01.9907062124480.6134-100000>