User connected with no identity -- iis ftp

iis ftp : User connected with no identity

SteveT
2/3/2007 12:13:43 PM

I just set up ftp on a Windows 2003 server. Allow anonymous is unchecked.
But each morning I notice a connection that has been going on for 4 hours
but no user name is listed just the IP address. Guest user is disabled and I
have renamed the Adminstrator user.

Any idea what that is and if it is someone connected how do I stop it
(without stopping ftp)?

Thanks,
Steve

SteveT
2/3/2007 3:16:59 PM

That's a good question. When I have tried to connect with a bogus name I
didn't see me in the list so when it said 4 hours for this other connection
I assumed something might be happening. I didn't see anything obvious in
Event viewer. When I disconnect their connection it came back so I stopped
the service.

What can I use to monitor it that would tell me what files were access if
any?

Thanks,
Steve

[quoted text, click to view]

Dave
2/3/2007 9:54:16 PM

is the connection actually doing anything or possibly just 'connected' but
not logged in, or not even trying to login??

[quoted text, click to view]

Bernard Cheah [MVP]
2/4/2007 11:43:18 AM

Post the log entries here.

for file access, I guess you can turn on file auditing on the particular
folder.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/

[quoted text, click to view]

Dave
2/4/2007 7:17:06 PM

the ftp service log should show who logged in and what files they up/down
loaded.

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis ftp

home · blog · groups

Questions? Comments? Contact the dn