full-disclosure - repeated port 21 attempts

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <018001c68f6c$fb0cfc50$6401a8c0@Dell>
Date: Wed Jun 14 05:43:00 2006
From: dunhamk at rica.net (Ken Dunham)
Subject: repeated port 21 attempts

>> I'm getting port 21 connection attempts every 5 minutes from about 
> half a dozen of my network users. These attempts are repeating 
> regularly with one computer sending out 1500+ attempts a day. I have 
> not seen this before and I'm wondering if anyone else here has seen a
client behave this way before?

Hi,
Sounds like FTP and SSH attacks that are opportunistically launched by
Romanian attackers to date, simple brute force and a few other hacking
exploits.  It's a consistent issue we've seen globally for many months now.

Cheers,
Ken