Well I turned an old PC into an http and FTP server just for fun and so I could get files anywhere in the world... So I am no server genius (very far from it) anyways I logged into it remotely today and saw that FileZila had thousands upon thousands of login attempts
Guy was trying to login as Administrator (but I could not see what passwords he was attempting)
My theory is he has a program running that looks for random ftp:// sites then he brute forces them trying to login as Admin, to then tunnel traffic (again a complete guess)
Anyways am I right at all or completely crazy, and how could I stop him
Btw the IP address leads to somewhere in Romania...
