Re: Cuervo, I disagree: ShareSniffer Released

Article View: comp.security.firewalls

Article #229

Back to comp.security.firewalls Previous Next

#229

From: Hal Burgiss
Date: Sun, 25 Feb 2001 00:24

24 lines
2629 bytes

On Sat, 24 Feb 2001 17:22:56 -0600, mirayge <mi_rayge@notyahoo.com> wrote:

><snip>
>Yes there are. Many people run FTP services on their machines and allow
>anonymous logins. They want to share programs and files. How do you
>find these servers? By scanning a range of IP numbers for open port 21.
>If they do not want you to connect they should tighten their security.

Right. Well that is also a very common port to scan looking for
vulnerabilities. Most connection attempts are such. I don't care about
what the rest of you do, but anyone who attempts to connect to my port
21 can expect an email to their ISP. How they handle that is between you
and them. I would guess that most don't do much unless there are
repeated complaints. I have no interest in stopping legit activity, but it
is hard to distinguish. So in my opinion probably 90%+ such attemtps are
by cracked boxes. I'd like to get those cleaned up, and thus I report
every single such attempt. Scan me if you want ....

-- 
Hal B
 hal@foobox.net
 hal@burgiss.net
 hburgiss@bellsouth.net
--

Technical Details

Message-ID: <slrn99gk6m.ibf.hal@localhost.localdomain>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.gv.tsc.tdk.com!falcon.america.net!newsfeed.atl!news1.atl.POSTED!localhost!hal

References:

<3A966412.9336DCD8@mynetwatchman.com> <1orc9t0dblf72e35c9vvjj562kfff17vmm@can.gov> <OTul6.2816$L04.327284@newsread2.prod.itd.earthlink.net> <jtvl6.1306$aA5.364833@typhoon2.ba-dsg.net> <VNyl6.3421$L04.381164@newsread2.prod.itd.earthlink.net> <z3zl6.2631$Ms3.427356@typhoon2.ba-dsg.net> <AvBl6.3902$S25.55097@typhoon.sonic.net> <YSXl6.1657$Tj1.1236856@nntp1.onemain.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,b3c453f70036b961
X-Google-Attributes: gidf922c,public
X-Google-Thread: 10090f,b3c453f70036b961
X-Google-Attributes: gid10090f,public
X-Google-Thread: 113850,b3c453f70036b961
X-Google-Attributes: gid113850,public
X-Google-Thread: f5dc1,b3c453f70036b961
X-Google-Attributes: gidf5dc1,public
X-Google-ArrivalTime: 2001-02-24 16:31:32 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!news.gv.tsc.tdk.com!falcon.america.net!newsfeed.atl!news1.atl.POSTED!localhost!hal
From: hal@burgiss.net (Hal Burgiss)
Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable
Subject: Re: Cuervo, I disagree: ShareSniffer Released
References: <3A966412.9336DCD8@mynetwatchman.com> <1orc9t0dblf72e35c9vvjj562kfff17vmm@can.gov> <OTul6.2816$L04.327284@newsread2.prod.itd.earthlink.net> <jtvl6.1306$aA5.364833@typhoon2.ba-dsg.net> <VNyl6.3421$L04.381164@newsread2.prod.itd.earthlink.net> <z3zl6.2631$Ms3.427356@typhoon2.ba-dsg.net> <AvBl6.3902$S25.55097@typhoon.sonic.net> <YSXl6.1657$Tj1.1236856@nntp1.onemain.com>
Reply-To: Hal Burgiss <hal@foobox.net>
Message-ID: <slrn99gk6m.ibf.hal@localhost.localdomain>
User-Agent: slrn/0.9.6.2 (Linux)
X-Original-NNTP-Posting-Host: 127.0.0.1
X-Original-Trace: 24 Feb 2001 19:24:54 -0500, 127.0.0.1
Lines: 24
Date: 24 Feb 2001 19:24:54 -0500
NNTP-Posting-Host: 216.78.197.8
X-Trace: news1.atl 983060697 216.78.197.8 (Sat, 24 Feb 2001 19:24:57 EST)
NNTP-Posting-Date: Sat, 24 Feb 2001 19:24:57 EST

Reply to Parent Message