Hack attempt

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
User avatar
Joe Blizzard
500 Command not understood
Posts: 2
Joined: 2018-08-27 13:37
First name: Joseph
Last name: Blizzard

Hack attempt

#1 Post by Joe Blizzard » 2018-08-27 14:16

Someone or something is hitting my server at random intervals with random IP addresses and a limited set of invalid usernames and passwords. I've been seeing these same users and passwords in my logs for several weeks, sometimes seconds apart, sometimes minutes, but continuously. The names and passwords look familiar, old email addresses that are no longer valid and things like that for the usernames, and passwords that look like the typical weak passwords that users generate when they're allowed to roll their own. It's as if someone got hold of a twenty year-old password list from someone who used to work here and they're beating them against the FTP server. They aren't getting in, but it makes it hard to parse the logs for valid entries when they're full of this stuff. Is there anything I could or should be doing about it?

User avatar
botg
Site Admin
Posts: 35547
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: Hack attempt

#2 Post by botg » 2018-08-27 14:53

You can safely ignore this.

User avatar
Joe Blizzard
500 Command not understood
Posts: 2
Joined: 2018-08-27 13:37
First name: Joseph
Last name: Blizzard

Re: Hack attempt

#3 Post by Joe Blizzard » 2018-08-27 17:29

Interestingly, it stopped shortly after I posted the above. Maybe he's monitoring this board.

csco
500 Command not understood
Posts: 1
Joined: 2018-08-28 21:38
First name: Tony
Last name: Witty
Location: New Jersey

Re: Hack attempt

#4 Post by csco » 2018-08-28 22:46

Block the IP range...

Post Reply