Hi Scott At 18:59 17/01/02 +0000, Scott C. Best wrote: >Julian: > Hello again! Wow, you have some interesting log files. :)
I know - Months and months of nothing remarkable, then two things completely baffle me in a week. : ) > > I keep getting connection attempts on tcp port 21 from this particular > > IP address. > > <snip> > > What do you think? What action would you take? > > You can see on www.incidents.org that port-21 scans are pretty >popular this month: a few days ago, scans to that port were 23-percent >of all submissions to DShield. Wow. Crikey! That's a good site, by the way. > If I were you, I'd definitely contact the administrator of the >site. Most of the harmless scans are a one time thing; a script kiddy >knocks on your door and moves on when they find it locked. If this >person is repeatedly trying to FTP something from you...it may just >be an honest misconfiguration. IE, someone had the 217.149.96.2 >address before you did, and was running an FTP server. Thanks for the advice. Regards Julian -- [EMAIL PROTECTED] www.ljchurch.co.uk _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
