[Dshield] FTP Port 20 invasions from France

John Groseclose iain at caradoc.org
Thu Aug 2 18:55:18 GMT 2001

At 12:50 PM -0500 8/2/01, Quibell, Marc wrote:
>Any idea on why some people/universities from France and Belgium are opening
>Port 20 FTP Data streams and transferrring large amounts of data (Up to over
>700MB)? Thanks...

You've left anonymous FTP open, and they're using your drive space to 
"publish" their warez files.

There's a decent article about this (Mac oriented, but good) at:

John Groseclose
iain at caradoc.org

More information about the list mailing list