Re: [SLUG] Anonymous ftp logins - intrusions?

[John Clarke <johnc@xxxxxxxxxxxxxxxxxx>]

On Wed, Feb 20, 2002 at 09:00:07AM +1100, Nick Croft wrote:

> This is the second time I've had this /var/log/message 

Only the second time?  I get hits from t-dialin.net most days.

>    Feb 20 08:02:30 debian wu-ftpd[13548]: ANONYMOUS FTP LOGIN FROM
>    pD952796A.dip.t-dialin.net [217.82.121.106], Jgpuser@xxxxxxxx
>    Feb 20 08:02:37 debian wu-ftpd[13548]: FTP session closed
> 
> I keep woofterpad running for local file transfers. I've tried emailing
> Jpguser@xxxxxxxx  but it doesn't get delivered.

Probably a bogus email address.  If you're only running the ftp server
for local access, then block incoming connections at your firewall. 
Don't expose *anything* that you don't have to.

> He's pingable at 217.82.121.106 . What else can I do with this address?

Not a lot.  You could try reporting it to abuse@xxxxxxxxxxx, but it'll
probably be ignored.


Cheers,

John
-- 
"Don't you just hate them?  Don't you just wanna break their ribs, cut their 
backs open and pull their lungs out from behind?"
            -- Ina Faye-Lund, on script kiddies