A recent brute-force scan of FTP servers available online via an IPv4 address revealed that 796,578 boxes can be accessed without the need of any credentials.
The perpetrator of this scan is a security researcher that goes by the name of Minxomat, owner of a cyber-security firm that performs these types of scans on a regular basis, but usually in a much more targeted manner and for the purpose of detecting malicious traffic and its sources.
Minxomat details the process on his blog, where he explains how he wrote a simple script and scanned all IPv4 addresses, attempting to connect via port 21 with the "anonymous" user and no password.
The scan was carried out with a simple Linux VM
In an email exchange with Softpedia, Minxomat detailed the reason. "I wanted to demonstrate how everyone, even on a low-power KVM instance, can perform a meaningful analysis of raw scandata," the researcher said.
"That meant using no off-the-shelf scanning tools, but ...
Intelligence View
⚡ tsecurity.de Intelligence
Nearly 800,000 FTP Servers Accessible Online without Authentication
A recent brute-force scan of FTP servers available online via an IPv4 address revealed that 796,578 boxes can be accessed without the need of any credentials. The perpetrator of this scan is a security researcher that goes by the name of…
Reagiere als Erste:r — dein Feedback zählt!
2. Cyber Threat Intelligence & Forensik
CTI Threat Relationship Graph2 Knoten / 1 Relationen