View Single Post
Old 12-24-2007, 09:37 AM   #1 (permalink)
Nik00117
Troubled
 
Join Date: Jan 2007
Location: Germany
Posts: 1,572
OS: XP Pro, Vista Ulimate

My System

Send a message via AIM to Nik00117 Send a message via MSN to Nik00117
[SOLVED] FTP Server Under Attack

Ok heres bit of a log from my last hack attempt (annoying more then anything else)

Quote:
[5] Mon 24Dec07 00:16:12 - (000387) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:14 - (000387) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:16 - (000387) Closing connection
[5] Mon 24Dec07 00:16:16 - (000388) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:19 - (000388) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:20 - (000388) Closing connection
[5] Mon 24Dec07 00:16:20 - (000389) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:23 - (000389) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:24 - (000389) Closing connection
[5] Mon 24Dec07 00:16:24 - (000390) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:27 - (000390) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:28 - (000390) Closing connection
[5] Mon 24Dec07 00:16:28 - (000391) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:31 - (000391) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:32 - (000391) Closing connection
[5] Mon 24Dec07 00:16:33 - (000392) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:35 - (000392) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:36 - (000392) Closing connection
[5] Mon 24Dec07 00:16:37 - (000393) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:39 - (000393) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:41 - (000393) Closing connection
[5] Mon 24Dec07 00:16:41 - (000394) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:43 - (000394) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:45 - (000394) Closing connection
[5] Mon 24Dec07 00:16:45 - (000395) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:48 - (000395) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:49 - (000395) Closing connection
[5] Mon 24Dec07 00:16:49 - (000396) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:52 - (000396) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:16:53 - (000396) Closing connection
[5] Mon 24Dec07 00:16:53 - (000397) Connected to 211.166.10.104 (Local address 192.168.0.190)
[5] Mon 24Dec07 00:16:58 - (000397) Too many times wrong password for user "ADMINISTRATOR" - disconnecting
[5] Mon 24Dec07 00:17:00 - (000397) Closing connection
[5] Mon 24Dec07 17:10:18 - (000399) Connected to 211.200.44.236 (Local address 192.168.0.190)
[5] Mon 24Dec07 17:10:25 - (000399) Closing connection
Now I was just wondering my current only tactic is to shut down the server to stop such an attack however is there another means of stopping suck attacks which quite frankly are very annoying.

It appears as the user uses different IP adresses, so if anyone has any information which would allow me to go ahead and stop such an account i would be very much gratefult o your effors.

O the server FTP client I use is serv u its the full edition so I should have all the bells and whistles it runs off my main machine.
Nik00117 is offline   Reply With Quote