attack or user error?

From: Erwin Hogeweg (erwin@hogeweg.cc)
Date: 05/17/02 

From: Erwin Hogeweg <erwin@hogeweg.cc>
Date: Fri, 17 May 2002 00:37:03 GMT

Hi,

Suddenly (it seems) I am no longer able to anonymously ftp into my RH6.2
machine. I re-installed wu-ftpd (wu-2.6.1-0.6x.21) and anonftp
(anonftp-3.0-3.i386), I checked and double checked the ftp-user settings
  but everyting seems to be allright.

Could this be an attack?

The machine is connected to the internet through a DSL link and runs its
own firewall.

[root@ns bin]# ftp ns
Connected to ns.hogewegnet.
220 ns.hogewegnet FTP server (Version wu-2.6.1-0.6x.21) ready.
Name (ns:erwin): ftp
331 Guest login ok, send your complete e-mail address as password.
Password:
530 Login incorrect.
Login failed.
ftp>

 From /var/log/messages:
May 16 19:09:21 ns ftpd[12970]: FTP LOGIN REFUSED (ftp in /etc/ftpusers)
FROM ns.hogewegnet [192.168.1.1], ftp
May 16 19:10:28 ns ftpd[12970]: FTP session closed

Please advise.

Regards,

Erwin

Relevant Pages

  • Re: IIS 6.0 FTP
    ... Server port: 21. ... I doubt IIS FTP has such feature. ... next, general 530 error indicating login failed, that could due to ... clients are using an order entry program created in Microsoft access. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Use //c to show ftp weather from Bureau of Meteorology
    ... I believe it may be able to display a text file ... The Bureau of Meterology gives Sydney weather via ftp: Seehttp://www.bom.gov.au/other/Ftp.shtml ... assume you setup a serial login. ... Type 'exit' to exit. ...
    (comp.sys.apple2)
  • Re: RBAC auth/profile to allow ftp?
    ... > Roles are not supposed to be able to login. ... > or ftp, ssh or anything else. ... Assigning these auths to a role doesn't seem to accomplish ... > for these accounts to be roles? ...
    (comp.unix.solaris)
  • Re: FTP - User login
    ... Are you referring to the Microsoft "Windows" Login when you reboot the ... and this is not actually a FTP ... as in choosing a account to login into windows on. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: ftp error messages
    ... the phrase "You entered an invalid login name or password" ... You will probably be asked to change your FTP server version info to ... 530 Login incorrect. ...
    (AIX-L)