I have been looking at server logs and there have been a number of connections from different IPs logging in my server. By default anonymous FTP is enabled in cpanel.
Sep 22 19:47:08 server pure-ftpd: (?@x.x.x.x) [INFO] New connection from x.x.x.x
Sep 22 19:47:11 server pure-ftpd: (?@x.x.x.x) [INFO] Anonymous user logged in the virtual FTP: xx.xx.xx.xx
Sep 22 19:47:12 server pure-ftpd: (ftp@x.x.x.x) [INFO] Can't change directory to /public/: No such file or directory
Sep 22 19:47:12 server pure-ftpd: (ftp@x.x.x.x) [INFO] Can't change directory to /pub/incoming/: No such file or directory
Sep 22 19:47:12 server pure-ftpd: (ftp@x.x.x.x) [INFO] Can't change directory to /incoming/: No such file or directory
Sep 22 19:47:13 server pure-ftpd: (ftp@x.x.x.x) [INFO] Can't change directory to /_vti_pvt/: No such file or directory
Sep 22 19:47:13 server pure-ftpd: (ftp@x.x.x.x) [INFO] Can't change directory to /upload/: No such file or directory
i am just not comfortable with anybody logging in. It could be a breaking attempt as well.
Here is how you disable the Anonymous FTP in cpanel.
Cpanel WHM > FTP Configuration > Disable Anonymous FTP
Cpanel > FTP Manager > Disable Anonymous FTP
Thats it!
Recent Comments