FTP Scanner - Hacked ?

[runboy]

F***** Up today making a FTP account and accidently gave Anonymous access to a big piece of my server. I was unprotected for 6 hours and sure enough had a visitor.
Anybody know what program tested my FTP ?

03:39:52 193.251.41.70 [1]USER anonymous 331
03:39:52 193.251.41.70 [1]PASS guest@here.com 230
03:39:56 193.251.41.70 [1]MKD .010128024358p 257
03:39:56 193.251.41.70 [1]RMD .010128024358p 250

Strangely enough I got the following on another IP adress:

03:39:52 193.251.41.70 [2]USER anonymous 331
03:39:52 193.251.41.70 [2]PASS guest@here.com 230
03:39:56 193.251.41.70 [2]MKD .010128024358p 550
03:39:59 193.251.41.70 [2]MKD .010128024402p 550

I don't like that this time 2 directories were created and none erased. When checking the folder I can't find the created folders. Can anybody explain ? If the guy is smart enough to mess with my log file he should have totally erased the entry.

 

[urbantechie]

Hehe, FXP teams jumping to the site of a pub, it wasn't me though...

 

[PistachioByAzul]

Yeah sounds like some FXP group.

 

[PistachioByAzul]

They're probably hidden folders, like /. tmp/ or something

 

[runboy]

Not hidden - I have set the folder(win2kserver) to show everything and still nothing