Please, stop hacking me

cricri · 12-12-2009, 07:52 PM

I vsftpd log is filled with this
http://img199.imageshack.us/img199/2829/stophackme.jpg
so im guessing that someone is trying to brute force my ftp. Is that normal? What can i do against it?
Also, note that this happenned many times, and that the ip change, and those ip seem to be already hacked website.

lupusarcanus · 12-12-2009, 07:53 PM

Quote:

Originally Posted by cricri

I vsftpd log is filled with this
http://img199.imageshack.us/img199/2829/stophackme.jpg
so im guessing that someone is trying to brute force my ftp. Is that normal? What can i do against it?
Also, note that this happenned many times, and that the ip change, and those ip seem to be already hacked website.

You have an IP address!

chrism01 · 12-13-2009, 05:45 PM

There only seems to be one ip address there.. You could block that via iptables; maybe /etc/hosts.deny. If you do have a lot of IPs doing that, look into fail2ban.