Serveur FTP

[Larifounette]

Bas voilà, j'ai un petit serveur FTP chez moi, avec une redirection Dyndns.
Bon, jusque là, tout vas bien.
Maintenant, de temp en temp j'ai des connections intenpestives, vous savez ce que c'est ??
Je vous met une partie du log :

Server online
(000054)25/03/2011 17:15:47 - (not logged in) (205.251.131.126)> Connected, sending welcome message...
(000054)25/03/2011 17:15:50 - (not logged in) (205.251.131.126)> disconnected.
(000055)27/03/2011 22:40:02 - (not logged in) (205.251.131.126)> Connected, sending welcome message...
(000055)27/03/2011 22:40:05 - (not logged in) (205.251.131.126)> disconnected.
(000056)28/03/2011 07:52:22 - (not logged in) (220.178.53.10)> Connected, sending welcome message...
(000056)28/03/2011 07:52:22 - (not logged in) (220.178.53.10)> could not send reply, disconnected.
(000057)29/03/2011 19:00:53 - (not logged in) (60.191.121.170)> Connected, sending welcome message...
(000057)29/03/2011 19:00:53 - (not logged in) (60.191.121.170)> could not send reply, disconnected.
(000058)30/03/2011 01:25:47 - (not logged in) (60.191.121.170)> Connected, sending welcome message...
(000058)30/03/2011 01:25:47 - (not logged in) (60.191.121.170)> disconnected.
(000059)30/03/2011 01:25:47 - (not logged in) (60.191.121.170)> Connected, sending welcome message...
(000059)30/03/2011 01:25:48 - (not logged in) (60.191.121.170)> disconnected.
(000060)30/03/2011 14:04:51 - (not logged in) (218.242.182.42)> Connected, sending welcome message...
(000060)30/03/2011 14:04:57 - (not logged in) (218.242.182.42)> disconnected.
(000061)30/03/2011 17:34:54 - (not logged in) (203.109.95.58)> Connected, sending welcome message...
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> PASS NULL
(000061)30/03/2011 17:34:55 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000061)30/03/2011 17:34:56 - (not logged in) (203.109.95.58)> PASS NULL
(000061)30/03/2011 17:34:56 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000061)30/03/2011 17:34:56 - (not logged in) (203.109.95.58)> PASS NULL
(000061)30/03/2011 17:34:56 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000061)30/03/2011 17:34:58 - (not logged in) (203.109.95.58)> PASS NULL
(000061)30/03/2011 17:34:58 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000061)30/03/2011 17:35:01 - (not logged in) (203.109.95.58)> PASS NULL
(000061)30/03/2011 17:35:01 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000061)30/03/2011 17:35:06 - (not logged in) (203.109.95.58)> PASS NULL
(000061)30/03/2011 17:35:06 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000061)30/03/2011 17:35:13 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:35:13 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:35:19 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:35:19 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:35:25 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:35:25 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:35:33 - (not logged in) (203.109.95.58)> USER mysql
(000061)30/03/2011 17:35:33 - (not logged in) (203.109.95.58)> 331 Password required for mysql
(000061)30/03/2011 17:35:41 - (not logged in) (203.109.95.58)> USER apache
(000061)30/03/2011 17:35:41 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000061)30/03/2011 17:35:51 - (not logged in) (203.109.95.58)> USER apache
(000061)30/03/2011 17:35:51 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000061)30/03/2011 17:35:55 - (not logged in) (203.109.95.58)> 421 Login time exceeded. Closing control connection.
(000061)30/03/2011 17:35:55 - (not logged in) (203.109.95.58)> disconnected.
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> Connected, sending welcome message...
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> USER apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> USER apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> USER apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> USER apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> USER apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> USER apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> USER apache
(000062)30/03/2011 17:35:56 - (not logged in) (203.109.95.58)> 331 Password required for apache
(000062)30/03/2011 17:35:57 - (not logged in) (203.109.95.58)> PASS mysql
(000062)30/03/2011 17:35:57 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000062)30/03/2011 17:35:57 - (not logged in) (203.109.95.58)> PASS mysql
(000062)30/03/2011 17:35:57 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000062)30/03/2011 17:35:58 - (not logged in) (203.109.95.58)> PASS mysql
(000062)30/03/2011 17:35:58 - (not logged in) (203.109.95.58)> 530 Login or password incorrect!
(000062)30/03/2011 17:36:00 - (not logged in) (203.109.95.58)> PASS mysql
(000062)30/03/2011 17:36:00 - (not logged in) (203.109.95.58)> 421 Temporarily banned for too many failed login attempts
(000062)30/03/2011 17:36:00 - (not logged in) (203.109.95.58)> disconnected.

[poulpito]

[tugs]

du scan . Si c un ftp perso, change le port par défaut

[dsebire]

en effet, c'est une attaque

meme chose regulierement chez moi.
par contre, j'ai pas changé le port sinon, ça passe plus certains proxys.

[poulpito]

juste réduire le nombre de tentative avant ban et la durée du ban et basta si tu veux pas changer le port
mais le port c'est plus simple et rapide

[Zedoune]

Regarde tes logs de ssh c'est encore plus drole

[gautisch]

t'utilise quoi comme serveur ftp ?

[Larifounette]

FileZilla Server