Uknown IP Adresses trying to Connect

[MrEpic]

Hi,
My Problem is that Uknown IP Adresses trying to Connect to my FileZilla Server and give it random Commands.
They tried to login with my name too.
Where they have the IP adress of my Server and how they know my Nickname?
And how can I stop this?


Thank you in advance for your help

[botg]

There's a finite number of IP addresses, all IP addresses are inherently known. Pick an address at random and see where it takes you. Just ignore any random connections if they appear on your server.

The only login attempt in the log comes from an IP address assigned to the same Internet Service Provider you have used to post your message.

[MrEpic]

Hi,

The only login attempt IP ,was a well-known one in my house (sorry for that).

So should I just ignore the random connections?
But what are these connections?

[boco]

If you don't use any weak passwords, just ignore them altogether.

These hits are from random net noise like port scanners etc.
Plus, IPs are like phone numbers, it can happen frequently that someone will dial the wrong number.
Third possible reason: Most IPs get reassigned to new participants dynamically. If the IP you got was previously actively used by someone else, before, you might still get a lot of old hits, as peers do not know the IP now belongs to you (will rectify itself over time). Cached IPs and the DNS system require some time to expire/update (read up on TTL or Time To Live), that's why most websites have static IPs.

Do you see that the incoming hits make no sense to FileZilla Server? They are from incompatible protocols (usually HTTP/S) and cannot be understood by an FTP server.

Two things on my way out:
1. Random hits are much more likely for IPv4. IPv6 space is magnitudes larger and finding a needle in THAT haystack by accident is extremely unlikely.
2. Running the FTP server on a non-default port will greatly reduce noise. You can use any port above 1024. Disadvantage: You need to enter the port in FileZilla or other FTP clients.

[botg]

2. Running the FTP server on a non-default port will greatly reduce noise. You can use any port above 1024. Disadvantage: You need to enter the port in FileZilla or other FTP clients.

I find that it increases noise if combined with a dynamic IP address if there are users of P2P file sharing protocols on your ISP.

[boco]

Depends on situation, yes. Whatever suits him.

But I'd deal rather with random hits, than being a portscanner target on the default port.

[MrEpic]

Thank you for your answers.
I think I'll just change the default port and see what happens.