Can I fake an IP in a ftp test?
Taking the numerator and the denominator
Friend wants my recommendation but I don't want to give it to him
PTIJ: Which Dr. Seuss books should one obtain?
What is the period/term used describe Giuseppe Arcimboldo's style of painting?
Recursively move files within sub directories
python displays `n` instead of breaking a line
Can a Knock spell open the door to Mordenkainen's Magnificent Mansion?
Weird lines in Microsoft Word
Make a Bowl of Alphabet Soup
What is this high flying aircraft over Pennsylvania?
I keep switching characters, how do I stop?
How do you justify more code being written by following clean code practices?
How to get directions in deep space?
How do I lift the insulation blower into the attic?
Trouble reading roman numeral notation with flats
"Marked down as someone wanting to sell shares." What does that mean?
What is the meaning of "You've never met a graph you didn't like?"
Can you take a "free object interaction" while incapacitated?
Amorphous proper classes in MK
Why is "la Gestapo" feminine?
Error in master's thesis, I do not know what to do
Magnifying glass in hyperbolic space
Why doesn't Gödel's incompleteness theorem apply to false statements?
Would a primitive species be able to learn English from reading books alone?
Can I fake an IP in a ftp test?
Recently I receive an message from my ISP mentioning:
"We have detected abuse from the IP address"
from ours IP servers. This message was send to us because a fail2ban application in some part of the world send an automatic message (I suppose it was automatic) to the ISP indicating the our IP what abusing FTP test.
My question is:
Can this application wrongly detect an FTP test from ours server IP because someone else was faking an FTP test ?
This is the message the ISP receive
Mar 11 05:23:24 li244-67 sshd[10025]: Invalid user ftptest from xxx.xxx.xx.xxx
Mar 11 05:23:24 li244-67 sshd[10025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=xxx.xxx.xx.xxx
Mar 11 05:23:27 li244-67 sshd[10025]: Failed password for invalid user ftptest from xxx.xxx.xx.xxx port 47998 ssh2
Thanks in advance!
ip ftp fail2ban
New contributor
add a comment |
Recently I receive an message from my ISP mentioning:
"We have detected abuse from the IP address"
from ours IP servers. This message was send to us because a fail2ban application in some part of the world send an automatic message (I suppose it was automatic) to the ISP indicating the our IP what abusing FTP test.
My question is:
Can this application wrongly detect an FTP test from ours server IP because someone else was faking an FTP test ?
This is the message the ISP receive
Mar 11 05:23:24 li244-67 sshd[10025]: Invalid user ftptest from xxx.xxx.xx.xxx
Mar 11 05:23:24 li244-67 sshd[10025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=xxx.xxx.xx.xxx
Mar 11 05:23:27 li244-67 sshd[10025]: Failed password for invalid user ftptest from xxx.xxx.xx.xxx port 47998 ssh2
Thanks in advance!
ip ftp fail2ban
New contributor
add a comment |
Recently I receive an message from my ISP mentioning:
"We have detected abuse from the IP address"
from ours IP servers. This message was send to us because a fail2ban application in some part of the world send an automatic message (I suppose it was automatic) to the ISP indicating the our IP what abusing FTP test.
My question is:
Can this application wrongly detect an FTP test from ours server IP because someone else was faking an FTP test ?
This is the message the ISP receive
Mar 11 05:23:24 li244-67 sshd[10025]: Invalid user ftptest from xxx.xxx.xx.xxx
Mar 11 05:23:24 li244-67 sshd[10025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=xxx.xxx.xx.xxx
Mar 11 05:23:27 li244-67 sshd[10025]: Failed password for invalid user ftptest from xxx.xxx.xx.xxx port 47998 ssh2
Thanks in advance!
ip ftp fail2ban
New contributor
Recently I receive an message from my ISP mentioning:
"We have detected abuse from the IP address"
from ours IP servers. This message was send to us because a fail2ban application in some part of the world send an automatic message (I suppose it was automatic) to the ISP indicating the our IP what abusing FTP test.
My question is:
Can this application wrongly detect an FTP test from ours server IP because someone else was faking an FTP test ?
This is the message the ISP receive
Mar 11 05:23:24 li244-67 sshd[10025]: Invalid user ftptest from xxx.xxx.xx.xxx
Mar 11 05:23:24 li244-67 sshd[10025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=xxx.xxx.xx.xxx
Mar 11 05:23:27 li244-67 sshd[10025]: Failed password for invalid user ftptest from xxx.xxx.xx.xxx port 47998 ssh2
Thanks in advance!
ip ftp fail2ban
ip ftp fail2ban
New contributor
New contributor
New contributor
asked 2 mins ago
Diego QuirósDiego Quirós
101
101
New contributor
New contributor
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Diego Quirós is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f959052%2fcan-i-fake-an-ip-in-a-ftp-test%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Diego Quirós is a new contributor. Be nice, and check out our Code of Conduct.
Diego Quirós is a new contributor. Be nice, and check out our Code of Conduct.
Diego Quirós is a new contributor. Be nice, and check out our Code of Conduct.
Diego Quirós is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f959052%2fcan-i-fake-an-ip-in-a-ftp-test%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown