Broadband
Dial-Up
Email
Hosting
Wireless
Security
Useful Tools
Quick Reference
Contact Us
Customer Portal
Site Search

Zen Internet Support Forum

Welcome to the Zen Internet community support forums.

Before posting we recommend you search our
extensive Knowledge Base or the forum archives
as an answer to your query may already be available.

Welcome to Zen Internet Support Forum Sign in | Join | Help
in
Forums Forum Rules

Can anyone offer help with this

Last post 07-11-2007, 12:10 PM by emgee. 3 replies.
Sort Posts: Previous Next
  •  03-11-2007, 9:24 AM 28630

    Can anyone offer help with this

    I have my own motor vehicle related website/parts business, which I have recently moved to a new server, which is hosted by Servint in the USA. I have been with these now for around 3 years, with no problems.

    Since moving servers, I am getting repeated FTP failed logins, using different usernames. Following there advise, I have installed a firewall to try and prevent this. I have posted a log below from the last hour

     

    Sat Nov  3 07:56:45 2007 lfd: Failed FTP login from 88.97.13.253 - 6 failure(s) in the last 295 secs
    Sat Nov 3 07:57:40 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 65 secs
    Sat Nov 3 07:58:36 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 120 secs
    Sat Nov 3 07:58:43 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 130 secs
    Sat Nov 3 07:59:30 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 185 secs
    Sat Nov 3 08:00:27 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 240 secs
    Sat Nov 3 08:01:27 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 10 secs
    Sat Nov 3 08:02:21 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 70 secs
    Sat Nov 3 08:03:13 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 130 secs
    Sat Nov 3 08:04:06 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 195 secs
    Sat Nov 3 08:04:59 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 255 secs
    Sat Nov 3 08:05:58 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 30 secs
    Sat Nov 3 08:06:56 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 90 secs
    Sat Nov 3 08:07:01 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 95 secs
    Sat Nov 3 08:07:06 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 100 secs
    Sat Nov 3 08:07:48 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 145 secs
    Sat Nov 3 08:08:41 2007 lfd: Failed FTP login from 88.97.13.253 - 6 failure(s) in the last 205 secs
    Sat Nov 3 08:09:40 2007 lfd: Failed FTP login from 88.97.13.253 - 7 failure(s) in the last 270 secs
    Sat Nov 3 08:10:34 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 40 secs
    Sat Nov 3 08:11:32 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 100 secs
    Sat Nov 3 08:12:24 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 160 secs
    Sat Nov 3 08:13:22 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 225 secs
    Sat Nov 3 08:14:15 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 285 secs
    Sat Nov 3 08:15:09 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 50 secs
    Sat Nov 3 08:15:36 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 80 secs
    Sat Nov 3 08:16:06 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 110 secs
    Sat Nov 3 08:16:06 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 110 secs
    Sat Nov 3 08:16:59 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 170 secs
    Sat Nov 3 08:17:56 2007 lfd: Failed FTP login from 88.97.13.253 - 6 failure(s) in the last 230 secs
    Sat Nov 3 08:18:55 2007 lfd: Failed FTP login from 88.97.13.253 - 7 failure(s) in the last 290 secs
    Sat Nov 3 08:19:48 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 50 secs
    Sat Nov 3 08:20:41 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 105 secs
    Sat Nov 3 08:21:39 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 165 secs
    Sat Nov 3 08:22:31 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 220 secs
    Sat Nov 3 08:23:29 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 285 secs
    Sat Nov 3 08:23:51 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 10 secs
    Sat Nov 3 08:24:27 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 50 secs
    Sat Nov 3 08:24:27 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 50 secs
    Sat Nov 3 08:25:19 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 105 secs
    Sat Nov 3 08:26:17 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 165 secs
    Sat Nov 3 08:27:15 2007 lfd: Failed FTP login from 88.97.13.253 - 6 failure(s) in the last 235 secs
    Sat Nov 3 08:28:04 2007 lfd: Failed FTP login from 88.97.13.253 - 7 failure(s) in the last 285 secs
    Sat Nov 3 08:29:02 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 50 secs
    Sat Nov 3 08:30:00 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 110 secs
    Sat Nov 3 08:30:53 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 165 secs
    Sat Nov 3 08:31:45 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 225 secs
    Sat Nov 3 08:32:18 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 270 secs
    Sat Nov 3 08:32:38 2007 lfd: Failed FTP login from 88.97.13.253 - 6 failure(s) in the last 290 secs
    Sat Nov 3 08:33:32 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 50 secs
    Sat Nov 3 08:34:30 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 110 secs
    Sat Nov 3 08:35:27 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 170 secs
    Sat Nov 3 08:36:20 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 230 secs
    Sat Nov 3 08:36:43 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 255 secs
    Sat Nov 3 08:37:14 2007 lfd: Failed FTP login from 88.97.13.253 - 6 failure(s) in the last 290 secs
    Sat Nov 3 08:37:14 2007 lfd: Failed FTP login from 88.97.13.253 - 7 failure(s) in the last 290 secs
    Sat Nov 3 08:38:13 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 55 secs
    Sat Nov 3 08:39:10 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 115 secs
    Sat Nov 3 08:40:03 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 170 secs
    Sat Nov 3 08:40:40 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 215 secs
    Sat Nov 3 08:40:56 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 230 secs
    Sat Nov 3 08:41:54 2007 lfd: Failed FTP login from 88.97.13.253 - 6 failure(s) in the last 295 secs
    Sat Nov 3 08:42:46 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 55 secs
    Sat Nov 3 08:43:40 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 115 secs
    Sat Nov 3 08:44:33 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 175 secs
    Sat Nov 3 08:45:32 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 240 secs
    Sat Nov 3 08:46:29 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 0 secs
    Sat Nov 3 08:47:18 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 55 secs
    Sat Nov 3 08:48:10 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 110 secs
    Sat Nov 3 08:49:08 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 170 secs
    Sat Nov 3 08:50:01 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 225 secs
    Sat Nov 3 08:50:58 2007 lfd: Failed FTP login from 88.97.13.253 - 6 failure(s) in the last 285 secs
    Sat Nov 3 08:51:51 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 45 secs
    Sat Nov 3 08:52:50 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 120 secs
    Sat Nov 3 08:53:50 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 190 secs
    Sat Nov 3 08:54:48 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 255 secs
    Sat Nov 3 08:55:46 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 15 secs
    Sat Nov 3 08:56:38 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 70 secs
    Sat Nov 3 08:57:32 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 130 secs
    Sat Nov 3 08:58:24 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 180 secs
    Sat Nov 3 08:59:16 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 235 secs
    Sat Nov 3 09:00:14 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 0 secs
    Sat Nov 3 09:01:07 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 60 secs
    Sat Nov 3 09:02:00 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 120 secs
    Sat Nov 3 09:02:58 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 180 secs
    Sat Nov 3 09:03:57 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 240 secs
    Sat Nov 3 09:04:51 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 5 secs
    Sat Nov 3 09:05:49 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 70 secs
    Sat Nov 3 09:06:42 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 135 secs
    Sat Nov 3 09:07:40 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 195 secs
    Sat Nov 3 09:08:37 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 260 secs
    Sat Nov 3 09:09:35 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 20 secs
    Sat Nov 3 09:10:27 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 80 secs
    Sat Nov 3 09:11:22 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 145 secs
    Sat Nov 3 09:12:20 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 210 secs
    Sat Nov 3 09:13:18 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 280 secs
    Sat Nov 3 09:14:01 2007 lfd: Failed FTP login from 88.97.13.253 - 1 failure(s) in the last 30 secs
    Sat Nov 3 09:14:21 2007 lfd: Failed FTP login from 88.97.13.253 - 2 failure(s) in the last 50 secs
    Sat Nov 3 09:15:15 2007 lfd: Failed FTP login from 88.97.13.253 - 3 failure(s) in the last 115 secs
    Sat Nov 3 09:16:08 2007 lfd: Failed FTP login from 88.97.13.253 - 4 failure(s) in the last 170 secs
    Sat Nov 3 09:17:00 2007 lfd: Failed FTP login from 88.97.13.253 - 5 failure(s) in the last 225 secs
     
    Having looked into this, it appears that the IP address shown, is my own IP from Zen, so it looks like I am trying to log in all the time, but I am not.
     
    I am now at a complete blank how to address this, what to look for or how to stop it. Do you have any idea's? I have contacted the host, but still 
    get the message
     
    Stuart  http://www.dynamicdrive.com for this script
    
    //configure refresh interval (in seconds)
    var countDownInterval=5;
    //configure width of displayed text, in px (applicable only in NS4)
    var c_reloadwidth=200
    var page_url = "addon_csf.cgi?action=tail&lines=100&refresh=1";
    
    
    
    
    var countDownTime=countDownInterval+1; function countDown(){ countDownTime--; if (countDownTime refresh in '+countDownTime+' seconds') document.c_reload.document.c_reload2.document.close() } counter=setTimeout("countDown()", 1000); } function startit(){ if (document.all||document.getElementById) //CHANGE TEXT BELOW TO YOUR OWN document.write('This page will refresh in '+countDownTime+' seconds') countDown() } if (document.all||document.getElementById) startit() else window.onload=startit
    Stuart Tunstall
  •  03-11-2007, 9:47 AM 28631 in reply to 28630

    Re: Can anyone offer help with this

    I have just found this in my router logs

     

    FIREWALL rule (1 of 2) : Protocol: TCP Src ip: 209.150.98.82 Src port: 52958 Dst ip: 207.58.161.** Dst port: 21 Chain: forward_host_service Rule Id: 1 Action: accept

     

    The 2nd IP is my server, what is the 1st? there are a load of these entries 


    Stuart Tunstall
  •  03-11-2007, 10:47 AM 28633 in reply to 28631

    Re: Can anyone offer help with this

    Though i cannot help with your problem really a simple tracert shows that ip as :-

     

    Tracing route to cyber.robotics.net [209.150.98.82]
    over a maximum of 30 hops:

      1     3 ms    <1 ms    <1 ms  www.routerlogin.com [192.168.0.1]
      2    15 ms    13 ms    16 ms  gauss-dsl.zen.net.uk [62.3.82.18]
      3    15 ms    15 ms    15 ms  deleuze-ge-0-1-0-1.hq.zen.net.uk [62.3.80.161]
      4    30 ms    14 ms    14 ms  lotze-ae0-8.hq.zen.net.uk [62.3.80.93]
      5    21 ms    21 ms    21 ms  zermelo-so-0-0-0-0.sp.zen.net.uk [62.3.80.82]
      6    96 ms    97 ms    98 ms  zubiri-so-0-0-0-0.ny.zen.net.uk [62.3.80.86]
      7    99 ms    97 ms    95 ms  66-195-65-57.static.twtelecom.net [66.195.65.57]

      8   105 ms   101 ms   101 ms  66.192.240.22
      9   103 ms   102 ms   105 ms  ge6-0-307.IR1.Ashburn-VA.us.xo.net [206.111.0.49
    ]
     10   103 ms   106 ms   103 ms  65.106.3.245.ptr.us.xo.net [65.106.3.245]
     11   103 ms   112 ms   101 ms  p0-0-0.MAR2.Washington-DC.us.xo.net [65.106.3.19
    8]
     12    98 ms    99 ms   100 ms  p15-0.CHR1.Washington-DC.us.xo.net [207.88.87.14
    ]
     13   107 ms   104 ms   101 ms  ip65-46-124-206.z124-46-65.customer.algx.net [65
    .46.124.206]
     14   100 ms    99 ms   101 ms  cr3-balt-fe0-0-0.qis.net [209.150.97.7]
     15    98 ms   100 ms    98 ms  cyber.robotics.net [209.150.98.82]

     

     

  •  07-11-2007, 12:10 PM 28662 in reply to 28633

    Re: Can anyone offer help with this

    Does your FTP server software allow blacklisting of IP addresses?

     

    Those entries do seem to be attempts for force entry from the same IP.

View as RSS news feed in XML