Date:  Thu, 5 Jul 2007 08:51:04 -0600
From:  "Rodrigo Ordonez Licona" <rodrigo (at mark) xnet.com.mx>
Subject:  [coba-e:10324] Re: Active Monitor: FTP server is not running
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <200707051450.l65EoTS5025402 (at mark) admin.xnet.com.mx>
In-Reply-To:  <012e01c7bed7$18707de0$3701a8c0@user33b5201c50>
X-Mail-Count: 10324

I received this errors every now and then

Supposed they were timeouts of the swatch daemon which tries to login ftp
every 15 minutes, 

Because 15 minutes afterwards I received the message that everything was ok
with ftp


Hth

Rodrigo o
 

-----Original Message-----
From: Arthur Sherman [mailto:arturs (at mark) netvision.net.il] 
Sent: Jueves, 05 de Julio de 2007 01:36 a.m.
To: coba-e (at mark) bluequartz.org
Subject: [coba-e:10323] Re: Active Monitor: FTP server is not running

> Hi Art;
> 
> Someone is try a dictionary attack against your ftp server.
> I notice it happening on slower cpu's like 400 MHz and 256 megs of ram 
> More often. I could say turn off ftp and only turn on when needed or 
> Use Secure FTP and leave ftp off, that is what I would do.....
> 
> Warning.... be sure you have a real good password on your box, No 
> cheating allowed that could get a cracker into your box.
> There are password generators on the net that can be downloaded.
> There is also www.grc.com password generator 
> https://www.grc.com/passwords.htm and is real good. It is design for 
> wireless security but it can be used for other password functions.

Hi Franklin,

This is a production server w/ 3 GB RAM and quite a good CPU.

I also thought it is a dictionary attack, but nothing particular in logs!
Just usual level of noise.

I'll keep an eye on it.

Thanks!


Best,

--
Arthur Sherman