[Zekanosmoke]

ok ill change it today but still.. some stupid people trying to log in thats someone from OVH
(001957) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> USER anyone
(001957) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> 331 Password required for anyone
(001957) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> PASS **************
(001957) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> 530 Login or password incorrect!
(001957) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> disconnected.
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> Connected, sending welcome message...
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> 220-FileZilla Server version 0.9.24 beta
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> 220-written by Tim Kosse (Tim.Kosse@gmx.de)
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> 220 Please visit http://sourceforge.net/projects/filezilla/
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> USER newuser
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> 331 Password required for newuser
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> PASS *****
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> 530 Login or password incorrect!
(001958) 19/05/2008 14:46:05 - (not logged in) (91.121.147.13)> disconnected.

[Expat]

Just change the port from 21 to any other number and you will have no more problems.

[Andy]

Report the IP to OVH for abuse and see what they can do. Nobody wants these sorts of people around.

[awalsh]

Look into installing BFD (Brute Force Detection), its a program/script that will automatically block IP's after a certain amount of failed logins

http://rfxnetworks.com/bfd.php

[Zekanosmoke]

ok thank you

[maclof]

Its just a brute force, ensure your password is a secure one (not easily guessable) and possibly disable direct root access and you should be fine.

Almost anybody who accesses the internet gets brute forced, even new servers.

[Zekanosmoke]

ok today someone was trying to hack my FTP with ip 91.121.27.27
its OVH IP 100%
it was for around 10 minutes and then he run away...
sometimes server lags .. that i cant do nothing... disconnects me all the time...
(001902) 18/05/2008 14:48:44 - (not logged in) (91.121.27.27)> USER www
(001902) 18/05/2008 14:48:44 - (not logged in) (91.121.27.27)> 331 Password required for www
(001903) 18/05/2008 14:48:45 - (not logged in) (91.121.27.27)> USER admin
(001903) 18/05/2008 14:48:45 - (not logged in) (91.121.27.27)> 331 Password required for admin
(001904) 18/05/2008 14:48:45 - (not logged in) (91.121.27.27)> USER administrateur
(001904) 18/05/2008 14:48:45 - (not logged in) (91.121.27.27)> 331 Password required for administrateur
(001905) 18/05/2008 14:48:45 - (not logged in) (91.121.27.27)> USER webmaster
(001905) 18/05/2008 14:48:45 - (not logged in) (91.121.27.27)> 331 Password required for webmaster
(001906) 18/05/2008 14:48:45 - (not logged in) (91.121.27.27)> USER root
(001906) 18/05/2008 14:48:45 - (not logged in) (91.121.27.27)> 331 Password required for root
(001900) 18/05/2008 14:48:46 - (not logged in) (91.121.27.27)> PASS *****
(001900) 18/05/2008 14:48:46 - (not logged in) (91.121.27.27)> 530 Login or password incorrect!
(001907) 18/05/2008 14:48:46 - (not logged in) (91.121.27.27)> USER test123
(001907) 18/05/2008 14:48:46 - (not logged in) (91.121.27.27)> 331 Password required for test123
(001908) 18/05/2008 14:48:46 - (not logged in) (91.121.27.27)> USER test
(001908) 18/05/2008 14:48:46 - (not logged in) (91.121.27.27)> 331 Password required for test
(001900) 18/05/2008 14:48:46 - (not logged in) (91.121.27.27)> disconnected.