FileZilla Forums

Posted: **2018-10-09 18:43**

Hello
I'm using Filezilla server on my internal network and I'm worried about seeing a connection attempt that does not come from me

(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> Connected on port 21, sending welcome message...
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220-FileZilla Server 0.9.60 beta
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220 Please visit https://filezilla-project.org/
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> HELP
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 214-The following commands are recognized:
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> ABOR ADAT ALLO APPE AUTH CDUP CLNT CWD
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> DELE EPRT EPSV FEAT HASH HELP LIST MDTM
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> MFMT MKD MLSD MLST MODE NLST NOOP NOP
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> OPTS PASS PASV PBSZ PORT PROT PWD QUIT
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> REST RETR RMD RNFR RNTO SITE SIZE STOR
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> STRU SYST TYPE USER XCUP XCWD XMKD XPWD
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> XRMD
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 214 Have a nice day.
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> SYST
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 215 UNIX emulated by FileZilla
(000001)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> disconnected.
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> Connected on port 21, sending welcome message...
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220-FileZilla Server 0.9.60 beta
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 220 Please visit https://filezilla-project.org/
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> USER admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 331 Password required for admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> PASS *****
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 530 Login or password incorrect!
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> USER admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 331 Password required for admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> PASS
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 530 Login or password incorrect!
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> USER Admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 331 Password required for admin
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> PASS *****
(000002)09/10/2018 20:17:22 - (not logged in) (192.168.0.104)> 530 Login or password incorrect!
(000002)09/10/2018 20:17:23 - (not logged in) (192.168.0.104)> USER Admin
(000002)09/10/2018 20:17:23 - (not logged in) (192.168.0.104)> 331 Password required for admin
(000002)09/10/2018 20:17:24 - (not logged in) (192.168.0.104)> PASS
(000002)09/10/2018 20:17:24 - (not logged in) (192.168.0.104)> 530 Login or password incorrect!
(000002)09/10/2018 20:17:25 - (not logged in) (192.168.0.104)> disconnected.

192.168.0.104 it's me
not logged in ??? who is it ? how do I know where it connects?
the firewall of my router is not even supposed to let port 21 pass!

thanks in advance

Posted: **2018-10-09 19:10**

i am noob here but i dont see other ips connect to your server. "not logged in" means u didnt create a user, you can go to edit/users and create a new user, then when u conect to the server and use your log in information(name/password) you will apear as "your username". hope it helps

edit: i just seen you get faild attempts, maybe reset your use and password?

Posted: **2018-10-09 19:15**

I mis explained

the connections do not come from me !!

I have no idea where they come from these attempts on admin and Admin
and that's the problem: who is trying to connect ?

Posted: **2018-10-09 19:17**

That access is usually caused by avast (or other AV) network scan. It scans for vulnerabilities regularly.

The name of the avast module is "WiFi inspector".

Posted: **2018-10-09 20:14**

piou...

thanks !

FileZilla Forums

who connects

who connects

Re: who connects

Re: who connects

Re: who connects

Re: who connects