From owner-freebsd-questions Sun Feb 8 14:11:45 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA11454 for questions-outgoing; Sun, 8 Feb 1998 14:11:45 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from ninbsdbox.dyn.ml.org (host77-155.airnet.net [209.64.77.155]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA11435 for ; Sun, 8 Feb 1998 14:11:31 -0800 (PST) (envelope-from kris@ninbsdbox.dyn.ml.org) Received: from ninbsdbox.dyn.ml.org (localhost.dyn.ml.org [127.0.0.1]) by ninbsdbox.dyn.ml.org (8.8.7/8.8.5) with ESMTP id QAA01465; Sun, 8 Feb 1998 16:11:12 -0600 (CST) Message-ID: <34DE2D80.2C12CF65@ninbsdbox.dyn.ml.org> Date: Sun, 08 Feb 1998 16:11:12 -0600 From: Kris Kirby Reply-To: kris@airnet.net Organization: Absolutely None! X-Mailer: Mozilla 4.04 [en] (X11; I; FreeBSD 2.2.5-RELEASE i386) MIME-Version: 1.0 To: Leif Neland CC: freebsd-questions@FreeBSD.ORG Subject: Re: uploads with ftpd References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Leif Neland wrote: > Luckily I don't have anonymous ftp running. A few days ago, I saw in the logs: > Anonymous ftp denied. It seems somebody just tried every dynamic ip's of my isp > to see if somebody allowed anonymous ftp. They had no way of knowing it was my > machine which got that ip at that moment... I actually allowed it and keep getting strafed from around the world ~3am local time. Jan 26 02:57:55 pinky ftpd[263]: connection from modem010.ts.spin.net.au Jan 26 02:57:56 pinky ftpd[264]: connection from server68.rttinc.com Jan 26 02:59:28 pinky ftpd[271]: connection from dialups-179.kalispell.ptinet.net Jan 26 02:59:30 pinky ftpd[271]: FTP LOGIN FAILED FROM dialups-179.kalispell.ptinet.net, . Jan 26 03:00:35 pinky ftpd[280]: connection from pri42.toledolink.com Jan 26 03:00:36 pinky ftpd[280]: FTP LOGIN FAILED FROM pri42.toledolink.com, . Jan 26 03:00:41 pinky ftpd[281]: connection from 1Cust202.tnt1.baytown.tx.da.uu.net Jan 26 03:01:45 pinky ftpd[286]: connection from pool069-max2.la-ca-us.dialup.earthlink.net Jan 26 03:01:46 pinky ftpd[286]: FTP LOGIN FAILED FROM pool069-max2.la-ca-us.dialup.earthlink.net, . All are dial-up lines. The *really* weird part: 220- Pinky.dyn.ml.org 220- -------------------------------------- 220- Anonymous Access Allowed. 220- And yes they are hitting it by IP scanning, as pinky.dyn.ml.org does not now, nor did that night, correspond to its ISP-assigned ip. -- Kris Kirby ------------------------------------------- TGIFreeBSD... 'Nuff said. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe questions" in the body of the message