View Single Post
Old 01-25-2005, 06:17 PM   #8 (permalink)
skaven
Insane
 
Location: Austin, TX
Those connections from a single IP are probably either a virus-infected PC randomly hitting your server and trying to infect it, or possibly somebody probing your FTP server to see if it's vulnerable. Seems logical for a script to make several connection attempts, each one using a different exploit, then if none get through, move to the next IP.

As long as your FTP client is up-to-date and doesn't have any known vulnerabilities, and you're up-to-date on your windows updates, you should be OK.

I wouldn't worry too much about password sniffing...the only time I've ever even heard of this working is at offices using old hub-based network equipment. You shouldn't have anything to worry about, unless you've got some really nosy sysadmins at your ISP...
skaven is offline  
 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76