From owner-freebsd-security Tue Jul 6 10:36:19 1999 Delivered-To: freebsd-security@freebsd.org Received: from cc942873-a.ewndsr1.nj.home.com (cc942873-a.ewndsr1.nj.home.com [24.2.89.207]) by hub.freebsd.org (Postfix) with ESMTP id A545914F68 for ; Tue, 6 Jul 1999 10:36:13 -0700 (PDT) (envelope-from cjc@cc942873-a.ewndsr1.nj.home.com) Received: (from cjc@localhost) by cc942873-a.ewndsr1.nj.home.com (8.9.3/8.8.8) id NAA19710 for freebsd-security@freebsd.org; Tue, 6 Jul 1999 13:37:37 -0400 (EDT) (envelope-from cjc) From: "Crist J. Clark" Message-Id: <199907061737.NAA19710@cc942873-a.ewndsr1.nj.home.com> Subject: Failed FTP Attempts To: freebsd-security@freebsd.org Date: Tue, 6 Jul 1999 13:37:37 -0400 (EDT) Reply-To: cjclark@home.com X-Mailer: ELM [version 2.4ME+ PL40 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hmmm... noticed these in my logs: Jul 6 10:05:37 cc942873-a ftpd[19216]: connection from lon-c45-001-vty4.as.wcom.net (195.232.2.4) Jul 6 10:05:37 cc942873-a ftpd[19216]: ANONYMOUS FTP LOGIN REFUSED FROM lon-c45-001-vty4.as.wcom.net Jul 6 10:05:37 cc942873-a ftpd[19216]: FTP LOGIN FAILED FROM lon-c45-001-vty4.as.wcom.net, mp3 Jul 6 10:05:38 cc942873-a ftpd[19216]: FTP LOGIN FAILED FROM lon-c45-001-vty4.as.wcom.net, warez Jul 6 10:05:40 cc942873-a ftpd[19216]: FTP LOGIN FAILED FROM lon-c45-001-vty4.as.wcom.net, leech My first guess is a mistaken identity; our friend in search of warez typed in a bad IP addy or something. Anyone see something there more sinister? I have no idea why people would be looking me up for ftp'ing warez and mp3s. BTW, I turned off my ftpd in inetd.conf after noticing this. I have not used ftp in ages now that I have managed to install ssh on 90% of the machines I use (the miracle of scp). -- Crist J. Clark cjclark@home.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message