Uknown IP Adresses trying to Connect

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
MrEpic
500 Command not understood
Posts: 3
Joined: 2020-05-27 11:22
Location: Germany

Uknown IP Adresses trying to Connect

#1 Post by MrEpic » 2020-05-27 11:33

Hi,
My Problem is that Uknown IP Adresses trying to Connect to my FileZilla Server and give it random Commands.
They tried to login with my name too.
Where they have the IP adress of my Server and how they know my Nickname?
And how can I stop this?


Thank you in advance for your help
Attachments
FTP1.jpg
FTP1.jpg (313.2 KiB) Viewed 870 times
FTP2jpg.jpg
FTP2jpg.jpg (278.28 KiB) Viewed 870 times

User avatar
botg
Site Admin
Posts: 33062
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Uknown IP Adresses trying to Connect

#2 Post by botg » 2020-05-28 07:44

There's a finite number of IP addresses, all IP addresses are inherently known. Pick an address at random and see where it takes you. Just ignore any random connections if they appear on your server.

The only login attempt in the log comes from an IP address assigned to the same Internet Service Provider you have used to post your message.

MrEpic
500 Command not understood
Posts: 3
Joined: 2020-05-27 11:22
Location: Germany

Re: Uknown IP Adresses trying to Connect

#3 Post by MrEpic » 2020-05-28 16:15

Hi,

The only login attempt IP ,was a well-known one in my house (sorry for that).

So should I just ignore the random connections?
But what are these connections?

User avatar
boco
Contributor
Posts: 25196
Joined: 2006-05-01 03:28
Location: Germany

Re: Uknown IP Adresses trying to Connect

#4 Post by boco » 2020-05-28 22:45

If you don't use any weak passwords, just ignore them altogether.

These hits are from random net noise like port scanners etc.
Plus, IPs are like phone numbers, it can happen frequently that someone will dial the wrong number.
Third possible reason: Most IPs get reassigned to new participants dynamically. If the IP you got was previously actively used by someone else, before, you might still get a lot of old hits, as peers do not know the IP now belongs to you (will rectify itself over time). Cached IPs and the DNS system require some time to expire/update (read up on TTL or Time To Live), that's why most websites have static IPs.

Do you see that the incoming hits make no sense to FileZilla Server? They are from incompatible protocols (usually HTTP/S) and cannot be understood by an FTP server.

Two things on my way out:
1. Random hits are much more likely for IPv4. IPv6 space is magnitudes larger and finding a needle in THAT haystack by accident is extremely unlikely. :)
2. Running the FTP server on a non-default port will greatly reduce noise. You can use any port above 1024. Disadvantage: You need to enter the port in FileZilla or other FTP clients.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

User avatar
botg
Site Admin
Posts: 33062
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Uknown IP Adresses trying to Connect

#5 Post by botg » 2020-05-29 07:13

2. Running the FTP server on a non-default port will greatly reduce noise. You can use any port above 1024. Disadvantage: You need to enter the port in FileZilla or other FTP clients.
I find that it increases noise if combined with a dynamic IP address if there are users of P2P file sharing protocols on your ISP.

User avatar
boco
Contributor
Posts: 25196
Joined: 2006-05-01 03:28
Location: Germany

Re: Uknown IP Adresses trying to Connect

#6 Post by boco » 2020-05-29 07:48

Depends on situation, yes. Whatever suits him.

But I'd deal rather with random hits, than being a portscanner target on the default port.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

MrEpic
500 Command not understood
Posts: 3
Joined: 2020-05-27 11:22
Location: Germany

Re: Uknown IP Adresses trying to Connect

#7 Post by MrEpic » 2020-05-29 08:21

Thank you for your answers.
I think I'll just change the default port and see what happens.

Post Reply