Re: ftp server question

Peter wrote:

i have a ftp server (filezilla server) on my system.

i get, almost everyday. someone trying to log on to my server as admin, administrator. etc. using a dictionary attack.

i have looked up, with whois were they are from and tried informing their isp about the attack.

most of the time, i get a message from them telling me that they need the log with times. also my gmt.
source ip and port, destination ip and port.

which i give them all but the source port. (if the wanted to, they could look the info up without it.)

which comes to my question.

is there a ftp server that logs source ip and port and destination ip and port.
also the logon name and password would also be nice.

or, getting this info is just a wast of time, for most isp do not care about hackers.

i really do not want to put a sniffer on my system and log every packet that comes into/out of my system just to not get the message from stupid isp people.






My log file became more of a problem than the attempts (which failed because there IS NO "administrator" account). The log file just took up a lot of space and by the time I could use it to try to report the buggers it was useless for anything else!

And if I report it to China, will they do anything? No. The users are in coffee shops and university connections and move along so they are impossible to trace.
.

Relevant Pages

  • Re: ftp server question
    ... someone trying to log on to my server as admin, ... etc. using a dictionary attack. ... source ip and port, destination ip and port. ...
    (alt.computer.security)
  • Re: ftp server question
    ... someone trying to log on to my server as admin, ... etc. using a dictionary attack. ... source ip and port, destination ip and port. ... which i give them all but the source port. ...
    (alt.computer.security)
  • Re: New funny demo of Virtual Folder
    ... I'm trying to contact our administrator. ... > The server is temporarily unable to service your request due to ... > ErrorDocument to handle the request. ... > Apache/1.3.19 Server at shellplus.com Port 80 ...
    (borland.public.delphi.thirdpartytools.general)
  • SMTP local
    ... Could not open connection to the host, ... I logged onto this server as an administrator ... unassigned" IP and given it the static IP of the server. ... connect to the server on port 25. ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • RE: Some technical errors
    ... If the SMTP server is not running on port 25 TCP it is not a public ... Manager - Computer Assurance Services BDO Chartered Accountants & ...
    (Security-Basics)