Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


sir1963

2239 posts

Uber Geek


#303962 23-Mar-2023 20:42
Send private message

I have had a number of people attempting to log into my home FTP server with log/pass trash:trash

 

Seems an odd one, I see Admin:Admin all of the time, but trash:trash just seems utterly weird

 

These attempts come from a variety of countries IPs (yeah I know they are probably script kiddies or hacked machines acting as intermediateries)

 

 

 

Anyone have any ideas?


Create new topic

neb

neb
8906 posts

Uber Geek

Trusted
Lifetime subscriber

  #3053865 23-Mar-2023 20:59
Send private message

Just a random guess, some IoS... uh, T device out there ships with FTP enabled and an account 'trash' with the same password?

 
 
 
 

Lenovo computer and accessories deals (affiliate link).
roobarb
570 posts

Ultimate Geek

Trusted

  #3053949 24-Mar-2023 07:21
Send private message

Um, you have an FTP server accessible from the internet?


xpd

xpd
aka Fast Raccoon !
13006 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #3053961 24-Mar-2023 08:41
Send private message

roobarb:

 

Um, you have an FTP server accessible from the internet?

 

 

Whats wrong with that ? I have FTP, Shoutcast, games, and more. 

 

It's like saying "You have a front door to your house ?"

 

Long as you know what you're doing and aware of the risks, then I do not see a problem.

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

       xpd.co.nz - Retro gaming, geek stuff and more    kiwiblast.co.nz - Lego and more

 

       Support Kiwi music!   The People   Black Smoke Trigger   Like A Storm   Devilskin

 

                                            NZ GEEKS Discord______________________________

 

 




sir1963

2239 posts

Uber Geek


  #3053965 24-Mar-2023 08:47
Send private message

roobarb:

 

Um, you have an FTP server accessible from the internet?

 

 

 

 

Yes I do, Its been very useful. I also run a VPN server and other services.

 

 


lxsw20
3192 posts

Uber Geek


  #3053976 24-Mar-2023 09:37
Send private message

Why does your FTP have to be exposed to the internet if you run a VPN server?


michaelmurfy
cat
12219 posts

Uber Geek

Moderator
ID Verified
Trusted
Lifetime subscriber

  #3053985 24-Mar-2023 10:12
Send private message

Exposing FTP was cool in the 90's but actually a huge security risk these days. FTP isn't encrypted, prone to brute forcing and the FTP servers themselves quite often run under elevated privileges that can lead to a full compromise (looking at you Filezilla).

 

I'd recommend setting up a Wireguard VPN and ditching the use of FTP entirely or if you're using Linux you could expose SSH with password auth disabled (so, only use a SSH key) ensuring fail2ban is installed and enabled and use SFTP. But, exposing FTP along with many other services without either proper network microsegmentation or if you're using a standard home router is actually quite a substantial security risk to your entire network and one vulnerability could get you in a whole lot of trouble with malware, being a part of a DDOS attack or much worse...

 

Being aware of the risks is one thing but I wouldn't recommend ever taking the risk on your own home network. If you must, rent a VPS from Linode or Vultr and play around there without risking full compromise of your home network.





Michael Murphy | https://murfy.nz
Referral Links: Tessie | Tesla | Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.


neb

neb
8906 posts

Uber Geek

Trusted
Lifetime subscriber

  #3054083 24-Mar-2023 13:00
Send private message

roobarb:

Um, you have an FTP server accessible from the internet?

 

 

I have both accessible from the Internet. Or at least things that listen on ports 21 and 25 and let people try and log in, with the password attempts going into a dictionary file. The mailer is chuckmail, the world's fastest and most secure MTA.



sir1963

2239 posts

Uber Geek


  #3054128 24-Mar-2023 13:53
Send private message

lxsw20:

 

Why does your FTP have to be exposed to the internet if you run a VPN server?

 

 

 

 

for very extended family over NZ who wanted to see wedding photos, etc etc etc because of covid lockdowns could not be there.

 

 

 

 


Mehrts
857 posts

Ultimate Geek

Trusted

  #3054133 24-Mar-2023 13:58
Send private message

Tailscale is a super simple way to grant trusted people acess to your machine.





Thinking about buying a Tesla? Feel free to use my referral link to get a few good perks when you order!


lxsw20
3192 posts

Uber Geek


  #3054156 24-Mar-2023 14:35
Send private message

sir1963:

 

lxsw20:

 

Why does your FTP have to be exposed to the internet if you run a VPN server?

 

 

 

 

for very extended family over NZ who wanted to see wedding photos, etc etc etc because of covid lockdowns could not be there.

 

 

 

 

 

 

 

 

Google Photos / iCloud / OneDrive? Any of the many other cloud offerings which don't mean using 1970s technology?

 

 

 

To each their own I guess :D


xpd

xpd
aka Fast Raccoon !
13006 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #3054171 24-Mar-2023 15:39
Send private message

Limited on storage for some people - 5GB of video/photos isnt much these days.

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

       xpd.co.nz - Retro gaming, geek stuff and more    kiwiblast.co.nz - Lego and more

 

       Support Kiwi music!   The People   Black Smoke Trigger   Like A Storm   Devilskin

 

                                            NZ GEEKS Discord______________________________

 

 


michaelmurfy
cat
12219 posts

Uber Geek

Moderator
ID Verified
Trusted
Lifetime subscriber

  #3054188 24-Mar-2023 16:27
Send private message

There are far better solutions to a FTP server. I don't even know why you'd pick FTP over the many options out there.

 

Self-hosted Nextcloud being one... If you combine it with Cloudflare Tunnel it'll work even without a port forward.

 

sir1963: for very extended family over NZ who wanted to see wedding photos, etc etc etc because of covid lockdowns could not be there.

 

I just used Nextcloud for this. Got people to drop files into it using a file drop link after the wedding then shared out a link to a folder of photos shortly after to everyone who asked. Worked incredibly well, no additional clients needed or anything.

 

 





Michael Murphy | https://murfy.nz
Referral Links: Tessie | Tesla | Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.


Create new topic





News and reviews »

Samsung Announces Galaxy AI
Posted 28-Nov-2023 14:48


Epson Launches EH-LS650 Ultra Short Throw Smart Streaming Laser Projector
Posted 28-Nov-2023 14:38


Fitbit Charge 6 Review 
Posted 27-Nov-2023 16:21


Cisco Launches New Research Highlighting Gap in Preparedness for AI
Posted 23-Nov-2023 15:50


Seagate Takes Block Storage System to New Heights Reaching 2.5 PB
Posted 23-Nov-2023 15:45


Seagate Nytro 4350 NVMe SSD Delivers Consistent Application Performance and High QoS to Data Centers
Posted 23-Nov-2023 15:38


Amazon Fire TV Stick 4k Max (2nd Generation) Review
Posted 14-Nov-2023 16:17


Over half of New Zealand adults surveyed concerned about AI shopping scams
Posted 3-Nov-2023 10:42


Super Mario Bros. Wonder Launches on Nintendo Switch
Posted 24-Oct-2023 10:56


Google Releases Nest WiFi Pro in New Zealand
Posted 24-Oct-2023 10:18


Amazon Introduces All-New Echo Pop in New Zealand
Posted 23-Oct-2023 19:49


HyperX Unveils Their First Webcam and Audio Mixer Plus
Posted 20-Oct-2023 11:47


Seagate Introduces Exos 24TB Hard Drives for Hyperscalers and Enterprise Data Centres
Posted 20-Oct-2023 11:43


Dyson Zone Noise-Cancelling Headphones Comes to New Zealand
Posted 20-Oct-2023 11:33


The OPPO Find N3 Launches Globally Available in New Zealand Mid-November
Posted 20-Oct-2023 11:06









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.







NordVPN