Re: Possible FTP-attack

• To: anders.sandell@sakdata.se
• Subject: Re: Possible FTP-attack
• From: =?ISO-8859-1?Q?J=FCri_Kaljundi?= <jk@stallion.ee>
• Date: Wed, 7 Aug 1996 10:41:32 +0300 (EET DST)
• Cc: www-security@ns2.rutgers.edu
• In-Reply-To: <199608061209.OAA16635@mail.swip.net>
• Organization: MicroLink OnLine

 Tue, 6 Aug 1996 anders.sandell@sakdata.se wrote:

> During the last 3 hours a user at power.bcs.ee has once every two seconds 
> tried to access my FTP-server with the username "hertz" and no password. 
> Since we dont have a user "hertz" every attempt is rejected. The rejections 
> show up in the security log and is filling it quickly though.

FYI power.bcs.ee aka power.netexpress.ee is a unix server with accounts
for dial-in customers of BCS/Netexpress, a small Internet access provider
in Estonia. It is probably some of their dial-in customers that probably
has something configured wrong.

Jⁿri Kaljundi
AS Stallion
jk@stallion.ee

• Possible FTP-attack
• From: anders.sandell@sakdata.se

• Previous: Re: question about server logs
• Next: Security aspects of Microsoft FrontPage server extensions?
• Index(es):
  • Index
  • Thread