Name: Anonymous 2009-07-26 3:34
So, I like to occasionally keep watch on my FTP log for my own amusement. Yesterday, I saw this pattern:
Jul 18 05:45:27 lab pure-ftpd: (?@212.200.11.54) [INFO] New connection from 212.200.11.54
Jul 18 05:45:27 lab pure-ftpd: (?@212.200.11.54) [WARNING] Authentication failed for user [administrateur]
Jul 18 05:45:33 lab pure-ftpd: (?@212.200.11.54) [WARNING] Authentication failed for user [administrateur]
...
...which continues in the same fashion until Jul 19 12:30:03, for a total of 10455 attempted logins. Now the question is: Why would anyone spend a whole day trying to bruteforce a non-standard account, and French to boot, which very likely doesn't even exist on most machines? God damn it, this is hilarious.
Jul 18 05:45:27 lab pure-ftpd: (?@212.200.11.54) [INFO] New connection from 212.200.11.54
Jul 18 05:45:27 lab pure-ftpd: (?@212.200.11.54) [WARNING] Authentication failed for user [administrateur]
Jul 18 05:45:33 lab pure-ftpd: (?@212.200.11.54) [WARNING] Authentication failed for user [administrateur]
...
...which continues in the same fashion until Jul 19 12:30:03, for a total of 10455 attempted logins. Now the question is: Why would anyone spend a whole day trying to bruteforce a non-standard account, and French to boot, which very likely doesn't even exist on most machines? God damn it, this is hilarious.