Re: ftp connection attempts

[Michael Smith <rybolov@authtrans.com>]

I've noticed a gradual increase in ftp attempts over the last month.  If you're
not running ftp services, block out the port:
ipchains -A input -p TCP -s 0.0.0.0/0 -d 0.0.0.0/0 21 -j REJECT

Thomas Guettler wrote:

> During the last days I got several ftp-connection attempts. Did some
> notice that on his machine, too?
>
> Dec 17 02:57:42 ftp connection attempt from www.prisma.pt
>   [194.38.131.80] (194.38.131.80:21->193.101.57.21:21)
> Dec 18 10:20:25 ftp connection attempt from 204.131.36.163
>   (204.131.36.163:21->193.101.57.21:21)
> Dec 19 01:12:19 ftp connection attempt from p3EE340F3.dip.t-dialin.net
>   [62.227.64.243] (62.227.64.243:2458->193.101.57.21:21)
> Dec 20 11:29:46 ftp connection attempt from act-proxy.actfr.com
>   [212.234.148.245] (212.234.148.245:21->193.101.57.21:21)
>
> --
> Thomas Guettler
> Office: <guettli@interface-business.de> www.interface-business.de
> Private:<guettli@gmx.de>  http://yi.org/guettli
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

--
It's a shame that a family can be torn apart
by something as simple as wild dogs.