Something is accessing the FTP server from my machine . . .

[warthogweb]

. . . and causing the firewall to activate. Typically it uses the current IP and attempts to gain access to the server every 30 seconds for twenty minutes using an old username. This happens several times a day. I am tired of resetting the firewall and the ISP cannot help. Any help would be appreciated. I am using WHM.

Thanks,

Martin

The log looks like this:

58912:Dec 6 18:07:45 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58918:Dec 6 18:08:18 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58921:Dec 6 18:08:54 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58934:Dec 6 18:09:29 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58940:Dec 6 18:10:05 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58943:Dec 6 18:10:40 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58950:Dec 6 18:11:15 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]
58953:Dec 6 18:11:50 barabel pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [hogwrat234]

 

[icandoit]

You will need to secure your server. Nothing to worry . they are trying to hack you it is not a big deal.:D

It happens all the time.