na71v3

vsftpd security breach?

4 posts in this topic

Hi I have a question. I was looking at my system logs and noticed a weird string of logins.

 

Jan 8 23:50:06 Tower vsftpd[2219]: connect from 213.230.72.57 (213.230.72.57)

 

There are a few more from random IP's from all over. Does this mean someone was able to log in or just attempted to log in? Please any advice would be great. Thank you.

0

Share this post


Link to post
Share on other sites

Whether it was successful or not, the mere fact that someone attempted to login to your server from Uzbekistan isn't a good thing.

 

If you need to access your server via the internet, use a VPN.  If you need to use a FTP server, then use something like ProFTPd instead of the built-in.

 

Close the ports you've opened up in the router to your server and/or take it out of the DMZ

 

 

0

Share this post


Link to post
Share on other sites

I have closed the port and just disabled FTP in general. I just want to know if anything was accessed. How would I be able to tell?

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

Copyright © 2005-2017 Lime Technology, Inc. unRAID® is a registered trademark of Lime Technology, Inc.