J-Soft Blog

Wednesday, December 17, 2003

They try. This was an unsophisticated attempted break in that I just happened to watch as it took place. Judging by the speed it may have been a bot. A reverse dns lookup puts the offending host in Portugal on telepac's network.

Dec 17 01:27:08 Basil wu-ftpd[28027]: connection from 81.193.166.207 [81.193.166.207]
Dec 17 01:27:08 Basil wu-ftpd[28025]: USER backup
Dec 17 01:27:09 Basil wu-ftpd[28022]: FTP session closed
Dec 17 01:27:09 Basil wu-ftpd[28023]: FTP session closed
Dec 17 01:27:09 Basil wu-ftpd[28027]: FTP LOGIN REFUSED (anonymous ftp denied on default server) FROM 81.193.166.207 [81.193.166.207], anonymous
Dec 17 01:27:09 Basil wu-ftpd[28027]: FTP LOGIN REFUSED (ftp in /etc/wu-ftpd/ftpusers) FROM 81.193.166.207 [81.193.166.207], anonymous
Dec 17 01:27:09 Basil wu-ftpd[28027]: FTP LOGIN REFUSED (ftp not in /etc/passwd) FROM 81.193.166.207 [81.193.166.207], anonymous
Dec 17 01:27:09 Basil wu-ftpd[28028]: connection from 81.193.166.207 [81.193.166.207]
Dec 17 01:27:09 Basil wu-ftpd[28025]: PASS password
Dec 17 01:27:10 Basil wu-ftpd[28024]: FTP session closed
Dec 17 01:27:10 Basil wu-ftpd[28028]: FTP LOGIN REFUSED (anonymous ftp denied on default server) FROM 81.193.166.207 [81.193.166.207], anonymous
Dec 17 01:27:10 Basil wu-ftpd[28028]: FTP LOGIN REFUSED (ftp in /etc/wu-ftpd/ftpusers) FROM 81.193.166.207 [81.193.166.207], anonymous
Dec 17 01:27:10 Basil wu-ftpd[28028]: FTP LOGIN REFUSED (ftp not in /etc/passwd) FROM 81.193.166.207 [81.193.166.207], anonymous
Dec 17 01:27:10 Basil wu-ftpd[28027]: FTP session closed
Dec 17 01:27:11 Basil wu-ftpd[28029]: connection from 81.193.166.207 [81.193.166.207]
Dec 17 01:27:11 Basil wu-ftpd[28028]: FTP session closed
Dec 17 01:27:11 Basil wu-ftpd[28030]: connection from 81.193.166.207 [81.193.166.207]
Dec 17 01:27:12 Basil wu-ftpd[28032]: connection from 81.193.166.207 [81.193.166.207]
Dec 17 01:27:12 Basil wu-ftpd[28029]: USER test
Dec 17 01:27:12 Basil wu-ftpd[28030]: USER webmaster
Dec 17 01:27:13 Basil wu-ftpd[28033]: connection from 81.193.166.207 [81.193.166.207]
Dec 17 01:27:13 Basil wu-ftpd[28032]: USER adm
Dec 17 01:27:13 Basil wu-ftpd[28029]: PASS password
Dec 17 01:27:13 Basil wu-ftpd[28034]: connection from 81.193.166.207 [81.193.166.207]
Dec 17 01:27:13 Basil wu-ftpd[28030]: PASS password
Dec 17 01:27:13 Basil wu-ftpd[28033]: FTP LOGIN REFUSED (anonymous ftp denied on default server) FROM 81.193.166.207 [81.193.166.207], anonymous
Dec 17 01:27:13 Basil wu-ftpd[28033]: FTP LOGIN REFUSED (ftp in /etc/wu-ftpd/ftpusers) FROM 81.193.166.207 [81.193.166.207], anonymous
Dec 17 01:27:13 Basil wu-ftpd[28033]: FTP LOGIN REFUSED (ftp not in /etc/passwd) FROM 81.193.166.207 [81.193.166.207], anonymous

posted by Jesse at 1:37 AM #