Something is accessing the FTP server from my machine . . .

warthogweb

Registered
Dec 6, 2012
1
0
1
cPanel Access Level
Website Owner
. . . and causing the firewall to activate. Typically it uses the current IP and attempts to gain access to the server every 30 seconds for twenty minutes using an old username. This happens several times a day. I am tired of resetting the firewall and the ISP cannot help. Any help would be appreciated. I am using WHM.

Thanks,

Martin

The log looks like this:

58912:Dec 6 18:07:45 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58918:Dec 6 18:08:18 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58921:Dec 6 18:08:54 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58934:Dec 6 18:09:29 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58940:Dec 6 18:10:05 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58943:Dec 6 18:10:40 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58950:Dec 6 18:11:15 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58953:Dec 6 18:11:50 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
 

icandoit

Well-Known Member
Dec 21, 2010
82
1
58
You will need to secure your server. Nothing to worry . they are trying to hack you it is not a big deal.:D

It happens all the time.