Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 8 Dec 2001 22:07:30 -0500 (EST)
From:      Marco Radzinschi <marco@radzinschi.com>
To:        Jim Freeze <jfreeze@freebsdportal.com>
Cc:        <questions@FreeBSD.ORG>
Subject:   Re: ANONYMOUS FTP LOGIN REFUSED
Message-ID:  <20011208220206.V40595-100000@mail.radzinschi.com>
In-Reply-To: <20011208205845.A25668@freebsdportal.com>

next in thread | previous in thread | raw e-mail | index | archive | help

Hello:

	These bastards from the abo.wanadoo.fr domain pull this sort
of thing all the time.  They are trying to find if a few things:

1. FTP servers
2. If the FTP servers allow anonymous login
3. If anonymous login allows uploading to incoming directory
4. If anonymous login allows downloading from incoming directory

This way, they can use other people's servers to distribute pirate
software and other things.

I'll bet anything they have an automated script that reports back to them
if it finds a site which satisfies all three conditions.

Marco Radzinschi

E-Mail: marco@radzinschi.com
AOL IM: CrackedBoy

Running FreeBSD 4.4-RELEASE i386
10:02PM  up 27 days,  6:30, 1 user, load averages: 1.00, 1.00, 1.00

On Sat, 8 Dec 2001, Jim Freeze wrote:

> Hi:
>
> Almost everyday I seem to get an anonymous ftp login attempts on
> my system.
>
> Dec  5 13:30:09 rabbit ftpd[15555]: FTP LOGIN FAILED FROM pD951C560.dip.t-dialin.net, anonymous@ftp.mi
> Dec  6 09:36:02 rabbit ftpd[16666]: ANONYMOUS FTP LOGIN REFUSED FROM ACBC509C.ipt.aol.com
> Dec  6 13:50:22 rabbit ftpd[17777]: ANONYMOUS FTP LOGIN REFUSED FROM ATuileries-106-1-4-235.abo.wanadoo.fr
> Dec  6 15:22:01 rabbit ftpd[18888]: ANONYMOUS FTP LOGIN REFUSED FROM AClermont-Ferrand-101-1-2-197.abo.wanadoo
> .fr
> Dec  7 08:23:47 rabbit ftpd[19999]: ANONYMOUS FTP LOGIN REFUSED FROM AToulouse-104-1-1-123.abo.wanadoo.fr
> Dec  7 18:46:22 rabbit ftpd[20000]: FTP LOGIN FAILED FROM ACBD19F2.ipt.aol.com, anonymous@ftp.mi
> Dec  8 17:20:19 rabbit ftpd[21111]: ANONYMOUS FTP LOGIN REFUSED FROM ANantes-102-1-1-57.abo.wanadoo.fr
>
>
> Could it be that this guy from France trying to break into my system
> or is it just an automated attempt to find open ftp sites?
>
>
> --
> Jim Freeze
> Today is a fine day for Ruby programming.
> www.freeze.org
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011208220206.V40595-100000>