|
Posted by Peter on June 23, 2006, 8:27 am
If you were Registered and logged in, you could reply and use other advanced thread options
i have a ftp server (filezilla server) on my system.
i get, almost everyday. someone trying to log on to my server as admin,
administrator. etc. using a dictionary attack.
i have looked up, with whois were they are from and tried informing their
isp about the attack.
most of the time, i get a message from them telling me that they need the
log with times. also my gmt.
source ip and port, destination ip and port.
which i give them all but the source port. (if the wanted to, they could
look the info up without it.)
which comes to my question.
is there a ftp server that logs source ip and port and destination ip and
port.
also the logon name and password would also be nice.
or, getting this info is just a wast of time, for most isp do not care about
hackers.
i really do not want to put a sniffer on my system and log every packet that
comes into/out of my system just to not get the message from stupid isp
people.
|
|
Posted by Sebastian Gottschalk on June 23, 2006, 8:58 am
If you were Registered and logged in, you could reply and use other advanced thread options
Peter wrote:
> i have a ftp server (filezilla server) on my system.
> [...]
> is there a ftp server that logs source ip and port and destination ip
> and port. also the logon name and password would also be nice.
FileZilla Server does so.
> or, getting this info is just a wast of time, for most isp do not
> care about hackers.
True, true.
|
|
Posted by Peter on June 23, 2006, 9:21 am
If you were Registered and logged in, you could reply and use other advanced thread options
> Peter wrote:
>> i have a ftp server (filezilla server) on my system.
>> [...]
>> is there a ftp server that logs source ip and port and destination ip
>> and port. also the logon name and password would also be nice.
>
> FileZilla Server does so.
that is why i use filezilla, because it logs name and password.
>
>> or, getting this info is just a wast of time, for most isp do not
>> care about hackers.
>
> True, true.
for normal attacks that people do. i gave up on infoing isp. was getting the
same stuff from them.
so for that. i am using the program from dshield.org
it takes the info from the firewall/router firewall and send it to them each
hour. they want that log.
|
|
Posted by nemo_outis on June 23, 2006, 1:00 pm
If you were Registered and logged in, you could reply and use other advanced thread options @news.dfncis.de:
> Peter wrote:
>> i have a ftp server (filezilla server) on my system.
>> [...]
>> is there a ftp server that logs source ip and port and destination ip
>> and port. also the logon name and password would also be nice.
>
> FileZilla Server does so.
>
>> or, getting this info is just a wast of time, for most isp do not
>> care about hackers.
>
> True, true.
>
I run Serv-u and it can log everything.
Regards,
|
|
Posted by Peter on June 23, 2006, 4:44 pm
If you were Registered and logged in, you could reply and use other advanced thread options i have put the server serv-u on the system.
have turned on the option of locking out if several attempt is made to logon
with x seconds.
just forget about telling isp about the hackers.
> @news.dfncis.de:
>
>> Peter wrote:
>>> i have a ftp server (filezilla server) on my system.
>>> [...]
>>> is there a ftp server that logs source ip and port and destination ip
>>> and port. also the logon name and password would also be nice.
>>
>> FileZilla Server does so.
>>
>>> or, getting this info is just a wast of time, for most isp do not
>>> care about hackers.
>>
>> True, true.
>>
>
>
>
> I run Serv-u and it can log everything.
>
> Regards,
>
>
|
| Similar Threads | Posted | | Is this server secure enough? Is this server hackable? | August 3, 2006, 1:45 pm |
| Locating a server | March 5, 2006, 12:38 pm |
| How to secure a server? | February 26, 2007, 11:01 am |
| more than only one certificate per server | June 21, 2008, 7:44 am |
| ms exchange server security | June 29, 2005, 4:13 pm |
| MS Virtual Server --Free- | April 4, 2006, 6:15 pm |
| POP3 Server Corrupt? | April 6, 2006, 3:37 pm |
| Anonymous Proxy Server... | May 15, 2006, 6:04 pm |
| i cant download because of proxy on lan server | August 22, 2006, 6:13 am |
| exchange server problem | December 19, 2006, 2:35 am |
|