Ftp-fun

I saw that my FTP-server had activity, pulled up the logs and…

Connected, sending welcome message…
220 WAR-FTPD 1.65 (Anonymous login allowed)
USER Administrator
331 Password required for administrator
PASS notused
530 Login or password incorrect!
USER Administrator
331 Password required for administrator
PASS 24Banc81
530 Login or password incorrect!
USER Administrator
331 Password required for administrator
PASS paradox
530 Login or password incorrect!
421 Kicked by Administrator
disconnected.
Connected, sending welcome message…
220-WAR-FTPD 1.65 (Anonymous login allowed)
220-
220 You write funny passwords! 🙂
USER Administrator
331 Password required for administrator
USER Administrator
331 Password required for administrator
USER Administrator
331 Password required for administrator
PASS ozn
530 Login or password incorrect!
PASS ozn
530 Login or password incorrect!
PASS ozn
530 Login or password incorrect!
421 Login time exceeded. Closing control connection.
disconnected.

… in the middle of this I kicked them out after changing the server banner message to also have “You write funny passwords! :)” in it… Their IP indicated that they were located somewhere in Asia-region, now anonymized. The really fun part in this, is that the “Administrator” account is a low-privilege account (so they can’t do anything with it) with the password… wait for it… “Administrator”.