The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

FTP hack ?????

Discussion in 'General Discussion' started by atul, May 24, 2004.

  1. atul

    atul Well-Known Member

    Joined:
    May 6, 2004
    Messages:
    52
    Likes Received:
    0
    Trophy Points:
    6
    Hello All,
    I usually chcek my server logs on daily basis.For last one month I have been observing some specific lines in my logs;

    date *.*.* server prodtpd[12589]:server.foo.com ( www.xyz.com[IP address]])ftp: Directory ~ftp/ is not accessible
    date *.*.* server prodtpd[12589]:server.foo.com ( www.xyz.com[IP address]])ftp: Directory ~ftp/ is not accessible
    date *.*.* server prodtpd[12589]:server.foo.com ( www.xyz.com[IP address]])ftp: Directory ~ftp/ is not accessible

    i think someone is trying to access ftp/ directory unofficially.He/She might trying it as http://www.foo.com/~ftp/ etc ,I mean they are trying to access ftp with ftp as user ?
    or I think someone is scanning the ports on daily basis!!!
    Or I am wrong?
    What this all lines?
    Help needed!!
    Thank you!!!
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Make sure that you have anonymous FTP disabled in WHM > FTP Configuration, otherwise you open yourself up to this kind of attack.
     
Loading...

Share This Page