who connects

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
po220
500 Command not understood
Posts: 3
Joined: 2018-10-09 18:37

who connects

#1 Post by po220 » 2018-10-09 18:43

Hello
I'm using Filezilla server on my internal network and I'm worried about seeing a connection attempt that does not come from me
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> Connected on port 21, sending welcome message...
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220-FileZilla Server 0.9.60 beta
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220 Please visit https://filezilla-project.org/
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> HELP
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 214-The following commands are recognized:
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> ABOR ADAT ALLO APPE AUTH CDUP CLNT CWD
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> DELE EPRT EPSV FEAT HASH HELP LIST MDTM
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> MFMT MKD MLSD MLST MODE NLST NOOP NOP
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> OPTS PASS PASV PBSZ PORT PROT PWD QUIT
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> REST RETR RMD RNFR RNTO SITE SIZE STOR
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> STRU SYST TYPE USER XCUP XCWD XMKD XPWD
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> XRMD
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 214 Have a nice day.
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> SYST
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 215 UNIX emulated by FileZilla
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> disconnected.
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> Connected on port 21, sending welcome message...
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220-FileZilla Server 0.9.60 beta
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220 Please visit https://filezilla-project.org/
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> USER admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 331 Password required for admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> PASS *****
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 530 Login or password incorrect!
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> USER admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 331 Password required for admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> PASS
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 530 Login or password incorrect!
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> USER Admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 331 Password required for admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> PASS *****
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 530 Login or password incorrect!
(000002)09/10/2018 20:17:23 - (not logged in) (192.168.0.104)> USER Admin
(000002)09/10/2018 20:17:23 - (not logged in) (192.168.0.104)> 331 Password required for admin
(000002)09/10/2018 20:17:24 - (not logged in) (192.168.0.104)> PASS
(000002)09/10/2018 20:17:24 - (not logged in) (192.168.0.104)> 530 Login or password incorrect!
(000002)09/10/2018 20:17:25 - (not logged in) (192.168.0.104)> disconnected.
192.168.0.104 it's me
not logged in ??? who is it ? how do I know where it connects?
the firewall of my router is not even supposed to let port 21 pass!

thanks in advance

PhantoM47
500 Command not understood
Posts: 5
Joined: 2018-10-09 07:58

Re: who connects

#2 Post by PhantoM47 » 2018-10-09 19:10

i am noob here but i dont see other ips connect to your server. "not logged in" means u didnt create a user, you can go to edit/users and create a new user, then when u conect to the server and use your log in information(name/password) you will apear as "your username". hope it helps

edit: i just seen you get faild attempts, maybe reset your use and password?

po220
500 Command not understood
Posts: 3
Joined: 2018-10-09 18:37

Re: who connects

#3 Post by po220 » 2018-10-09 19:15

I mis explained

the connections do not come from me !!

I have no idea where they come from these attempts on admin and Admin
and that's the problem: who is trying to connect ?

User avatar
boco
Contributor
Posts: 24153
Joined: 2006-05-01 03:28
Location: Germany

Re: who connects

#4 Post by boco » 2018-10-09 19:17

That access is usually caused by avast (or other AV) network scan. It scans for vulnerabilities regularly.

The name of the avast module is "WiFi inspector".
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

po220
500 Command not understood
Posts: 3
Joined: 2018-10-09 18:37

Re: who connects

#5 Post by po220 » 2018-10-09 20:14

piou...

thanks !

Post Reply