ftp hacking

[toomyg]

I think someone was trying to hack my ftp site :mad:

I read this in my ftp log yesterday and here it is below I'm I right? was someone trying to hack me:confused:
looks like it happened afew days ago and it looks like some one was trying to find hidden directory's or something
[2007-05-29 16:02:35]:CONNECT [ 124] - Incoming connection request on interface 192.168.1.125
[2007-05-29 16:02:35]:CONNECT [ 124] - Connection request rejected from blocked address 193.167.66.25
[2007-05-29 17:14:59]:CONNECT [ 125] - Incoming connection request on interface 192.168.1.125
[2007-05-29 17:14:59]:CONNECT [ 125] - Connection request accepted from 80.134.102.34
[2007-05-29 17:15:00]:COMMAND [ 125] - USER anonymous
[2007-05-29 17:15:00]: REPLY [ 125] - 331 User anonymous, password please

[2007-05-29 17:15:00]:COMMAND [ 125] - PASS ***********
[2007-05-29 17:15:00]: REPLY [ 125] - 230 Password Ok, User logged in

[2007-05-29 17:15:00]: SYSTEM [ 125] - Anonymous user "anonymous" logged in with password "Wgpuser@home.com"
[2007-05-29 17:15:00]:COMMAND [ 125] - CWD /pub/
[2007-05-29 17:15:00]: REPLY [ 125] - 550 Path does not exist

[2007-05-29 17:15:00]:COMMAND [ 125] - CWD /public/
[2007-05-29 17:15:00]: REPLY [ 125] - 250 Change directory ok

[2007-05-29 17:15:00]:COMMAND [ 125] - MKD 070529231510p
[2007-05-29 17:15:00]: REPLY [ 125] - 500 User does not have permission

[2007-05-29 17:15:00]:COMMAND [ 125] - CWD /pub/incoming/
[2007-05-29 17:15:00]: REPLY [ 125] - 550 Path does not exist

[2007-05-29 17:15:01]:COMMAND [ 125] - CWD /incoming/
[2007-05-29 17:15:01]: REPLY [ 125] - 550 Path does not exist

[2007-05-29 17:15:01]:COMMAND [ 125] - CWD /_vti_pvt/
[2007-05-29 17:15:01]: REPLY [ 125] - 550 Path does not exist

[2007-05-29 17:15:01]:COMMAND [ 125] - CWD /
[2007-05-29 17:15:01]: REPLY [ 125] - 250 Change directory ok

[2007-05-29 17:15:01]:COMMAND [ 125] - MKD 070529231510p
[2007-05-29 17:15:01]: REPLY [ 125] - 500 Invalid Path

[2007-05-29 17:15:01]:COMMAND [ 125] - CWD /upload/
[2007-05-29 17:15:01]: REPLY [ 125] - 550 Path does not exist

[2007-05-29 17:15:01]: SYSTEM [ 125] - The connection was closed by the remote socket
[2007-05-29 17:15:01]:CONNECT [ 125] - Connection terminated.



http://tomswebplace.dyndns.org/

[mairving]

Hack you, you are allowing anonymous access. Not a good idea.

[toomyg]

Hack you, you are allowing anonymous access. Not a good idea.
I know your right not a good idea but I had it like that for a reason that had to do with my message board but after I seen my ftp log I closed the ports for ftp and disabled anonymous access


I worked to hard on my web site to have some jerk mess it up for me!



thanks mairving