PCA Forums

Hello once again all,

I just had a quick question. The other day a person gained access to my FTP server at home and shared it with several people on an online message board. He created a few directories, which I cannot seem to delete but generally did not do anything too destructive, that I know of now. I just wanted to know...I have his IP address in the FTP log...and I looked it up and it told me it was given to him by the RIPE Network Coordination Centre. I don't want to post the IP on the web, but I do know that it was a dynamic address....so I will have to contact them in order to let them find out who it was at that time. I have the time and date that he entered my system and created the directories. My question is....should I take the time to report it or not? I have taken down my FTP server for now, until I can find a more secure server to use other than Windows IIS....and yes, I know...you don't have to tell me how insecure that is. If I did want to report it, where would I go about doing that? Also, what FTP services do all you guys use?

Thanks for the help,

matt

Hell yes I would report it! even kiddy hackers are a pain in the ass! You would report it to the ISP. Just send them with a polite e-mail with all of the info and they should take care of it...... unlike AOHell.

that serves ya right for using IIS in windows BLEH... try Servu or G6 FTP... and run a software firewall program. AND DISABLE IIS if you don't need it. If all your using it for is a FTP server use one of the ones i mentioned. IIS is too damn insecure and is too vulerable to hacking.

Another vote for Serv-U.

Yes, IIS is a security nightmare

G6 is very nice, so is servu, and the nicest thing is (non techie types) can spend about an hour with them and get a ftp figured out, but are very scalable and functional, and g6 (what i use) is very secure and takes very little cpu cycles, far more efficient then microsoft, apache/g6 all the way , forget iis

Before you go reporting him are you allowed in your terms of service by your ISP to be running servers? If not they might point right back at you. And if the ftp is full of less than legit software you might not want to be broadcasting how he hacked it to the authorities.

I've been using G6 as well for about a year now. Its very easy to setup once you figure the program out a little (should know it in less than an hour of using). However the program seems kinda irratic? I don't know if it's the program or my firewall though. It seems some computers can connect to my server, however other machines can't.

How do you disable IIS?