- Nov 1, 2005
- 3,194
- 0
- 0
i had anonymous login and write access for personal and friends use. just recently i logged into the ftp server and found out someone uploaded a game called call.of.cthulhu.dark.corners.of.the.earth-reloaded. none of the people i know uploaded that file.
are there online scanners who probe people's ftp port and borrows their server for space?
edit: this all makes sense now. the other day my internet connection was at crawling speeds. i thought it was just my ISP havine issues. now i'm sure that someone was downloading the uploaded files off of my server.
edit 2: i turned on anonymous access and only allowed write access to see what kind of files i'd get. later i looked at my ftp server log and see that someone is trying to hack into the administrator account, but there is no such account. it looks like it's done through a program and not manually. :laugh: here's the log:
[5] Wed 22Mar06 16:03:02 - (001053) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:02 - (001053) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Wed 22Mar06 16:03:02 - (001053) Closing connection
[5] Wed 22Mar06 16:03:02 - (001054) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:03 - (001054) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Wed 22Mar06 16:03:03 - (001054) Closing connection
[5] Wed 22Mar06 16:03:03 - (001055) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:03 - (001055) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Wed 22Mar06 16:03:04 - (001055) Closing connection
[5] Wed 22Mar06 16:03:04 - (001056) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:04 - (001056) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Wed 22Mar06 16:03:04 - (001056) Closing connection
[5] Wed 22Mar06 16:03:04 - (001057) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:05 - (001057) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
are there online scanners who probe people's ftp port and borrows their server for space?
edit: this all makes sense now. the other day my internet connection was at crawling speeds. i thought it was just my ISP havine issues. now i'm sure that someone was downloading the uploaded files off of my server.
edit 2: i turned on anonymous access and only allowed write access to see what kind of files i'd get. later i looked at my ftp server log and see that someone is trying to hack into the administrator account, but there is no such account. it looks like it's done through a program and not manually. :laugh: here's the log:
[5] Wed 22Mar06 16:03:02 - (001053) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:02 - (001053) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Wed 22Mar06 16:03:02 - (001053) Closing connection
[5] Wed 22Mar06 16:03:02 - (001054) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:03 - (001054) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Wed 22Mar06 16:03:03 - (001054) Closing connection
[5] Wed 22Mar06 16:03:03 - (001055) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:03 - (001055) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Wed 22Mar06 16:03:04 - (001055) Closing connection
[5] Wed 22Mar06 16:03:04 - (001056) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:04 - (001056) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Wed 22Mar06 16:03:04 - (001056) Closing connection
[5] Wed 22Mar06 16:03:04 - (001057) Connected to 207.210.101.213 (Local address 192.168.1.50)
[5] Wed 22Mar06 16:03:05 - (001057) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
