General Discussion

Author

Port 21

Boulware5

2001-09-06, 7:24 pm

I've noticed a bunch of times recently zonealarm has blocked off port 21 (FTP) from the same IP address. I uncovered it's actually a German web site, search.digitide.de. Is this something I should ignore or take notice of? I was alarmed that I got that message because files that could possibly be dangerous could have been placed on my computer using FTP through port 21. But why does the DNS lookup of the IP point to a website and not a person?

ccieToBe

2001-09-06, 7:37 pm

It sounds like the search engine's spider is indexing your FTP site. If this search engine is also an ISP, you could be under attack from a user though. There's also a possibility that this web server was comprimised, but it wouldn't make much sense to take controll of a web server as a jumping of point for attacking individual PCs.

Chances are your FTP site's just being indexed. There are some things you can do to prevent being indexed if you don't want the public to see your site in search engines.

Sponsored Links