Anonymous FTP attempt floods
#1
Heya guys. I'm needing a bit of help pinning down what could be causing an issue I'm having.

I'm having a very similar issue as posted here : http://forum.xbmc.org/showthread.php?tid=118340

I'm getting a bombardment of Anonymous FTP login attempts from my XBMC machine running in the living room. The FTP server is password protected and I'm having no trouble accessing it during normal use.
It seems something that I'm not aware of is trying on its own to access the media source.

I'm in the process of removing/ cleaning unused addons, and then I'll either begin to remove the used ones from there, or just wipe the machine and build from the ground up while constantly monitoring my server's logs.

Does anyone have any tips, or notice something I'm looking over?
logs and plugins list are below.

list of plugins, as listed under addons/ folder :
http://pastebin.com/LyaGiZf5

XBMC log :
http://pastebin.com/xsfa0rSL

vsftpd's logging (this is what is flooding in) :
Code:
Dec 25 20:57:13 Vector vsftpd[9784]: pam_unix(ftp:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=anonymous rhost=10.0.0.107
Dec 25 20:57:17 Vector vsftpd[9787]: pam_unix(ftp:auth): check pass; user unknown
Dec 25 20:57:17 Vector vsftpd[9787]: pam_unix(ftp:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=anonymous rhost=10.0.0.107
Dec 25 20:57:20 Vector vsftpd[9792]: pam_unix(ftp:auth): check pass; user unknown
Dec 25 20:57:20 Vector vsftpd[9792]: pam_unix(ftp:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=anonymous rhost=10.0.0.107
(by the way, these times don't correspond to any activity that i can notice in xbmc's log)
Reply
#2
See http://forum.xbmc.org/showthread.php?tid=149712
Reply
#3
Did not intentionally mention those plugins, they are simply installed. Removing those plugins does not solve this problem.
By the way 10.0.0.107 is the xbmc client, guess I should have mentioned that. Your original message would have been more helpful.
Reply
#4
Disregard, problem's been solved.
Reply

Logout Mark Read Team Forum Stats Members Help
Anonymous FTP attempt floods0