Thinking...
[get complete service list]
Top of page
Port Information
Protocol Service Name
udp ftp File Transfer [Control]
tcp ftp File Transfer [Control]
tcp NetAdministrator [trojan] Net Administrator
tcp Ramen [trojan] Ramen
tcp RTB666 [trojan] RTB 666
tcp SennaSpyFTPserver [trojan] Senna Spy FTP server
tcp Traitor21 [trojan] Traitor 21
tcp [trojan]TheFlu [trojan] The Flu
tcp WebEx [trojan] WebEx
tcp WinCrash [trojan] WinCrash
tcp AudioGalaxy AudioGalaxy file sharing app
tcp MotIvFTP [trojan] MotIv FTP
tcp Larva [trojan] Larva
tcp BladeRunner [trojan] BladeRunner
tcp CattivikFTPServer [trojan] Cattivik FTP Server
tcp CCInvader [trojan] CC Invader
tcp DarkFTP [trojan] Dark FTP
tcp DolyTrojan [trojan] Doly Trojan
tcp Fore [trojan] Fore
tcp FreddyK [trojan] FreddyK
tcp InvisibleFTP [trojan] Invisible FTP
tcp Juggernaut42 [trojan] Juggernaut 42
tcp BackConstruction [trojan] Back Construction
Top IPs Scanning
Today Yesterday
79.124.62.134 (82)18.189.74.1 (352)
185.178.208.135 (66)89.42.231.182 (339)
156.38.55.75 (65)35.199.112.179 (308)
85.217.149.66 (62)71.6.232.30 (153)
35.199.112.179 (58)79.124.62.230 (127)
54.242.154.56 (36)79.124.62.126 (123)
35.216.201.9 (28)34.46.149.225 (112)
81.71.96.41 (24)18.225.7.162 (84)
49.235.35.175 (23)164.52.24.182 (75)
72.167.37.3 (20)85.217.149.42 (73)
Port diary mentions
URL
Distributed FTPPort 21 scan follow-up; Port 23 scan increases;
FTP Vulnerability & Accompanying Activity
FTP-Brute Force Attacks and Password Management
Top of page
User Comments
Submitted By Date
Comment
Johannes Ullrich 2007-02-12 12:31:02
A new very trivial exploit for telnet on Solaris 10/11 was made public Feb. 11th 2007.
Top of page
CVE Links
CVE # Description
CVE-2014-7169 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.
Top of page