Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 08 Feb 1998 16:11:12 -0600
From:      Kris Kirby <kris@ninbsdbox.dyn.ml.org>
To:        Leif Neland <leifn@image.dk>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: uploads with ftpd
Message-ID:  <34DE2D80.2C12CF65@ninbsdbox.dyn.ml.org>
References:  <a84_9802081043@swimsuit.swimsuit.roskildebc.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
Leif Neland wrote:
> Luckily I don't have anonymous ftp running. A few days ago, I saw in the logs:
> Anonymous ftp denied. It seems somebody just tried every dynamic ip's of my isp
> to see if somebody allowed anonymous ftp. They had no way of knowing it was my
> machine which got that ip at that moment...

I actually allowed it and keep getting strafed
from around the world ~3am local time.

Jan 26 02:57:55 pinky ftpd[263]: connection from modem010.ts.spin.net.au
Jan 26 02:57:56 pinky ftpd[264]: connection from server68.rttinc.com
Jan 26 02:59:28 pinky ftpd[271]: connection from dialups-179.kalispell.ptinet.net
Jan 26 02:59:30 pinky ftpd[271]: FTP LOGIN FAILED FROM dialups-179.kalispell.ptinet.net, .
Jan 26 03:00:35 pinky ftpd[280]: connection from pri42.toledolink.com
Jan 26 03:00:36 pinky ftpd[280]: FTP LOGIN FAILED FROM pri42.toledolink.com, .
Jan 26 03:00:41 pinky ftpd[281]: connection from 1Cust202.tnt1.baytown.tx.da.uu.net
Jan 26 03:01:45 pinky ftpd[286]: connection from pool069-max2.la-ca-us.dialup.earthlink.net
Jan 26 03:01:46 pinky ftpd[286]: FTP LOGIN FAILED FROM pool069-max2.la-ca-us.dialup.earthlink.net, .

All are dial-up lines. The *really* weird part:
220- Pinky.dyn.ml.org
220- --------------------------------------
220- Anonymous Access Allowed. 
220- 

And yes they are hitting it by IP scanning,
as pinky.dyn.ml.org does not now, nor did
that night, correspond to its ISP-assigned ip.
-- 

Kris Kirby <kris@airnet.net>
-------------------------------------------
TGIFreeBSD... 'Nuff said.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?34DE2D80.2C12CF65>