NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Stuck in FTP hell *&^%$#@!
Somehow I lost FTP access to my readynas duo thru my dlink Dir-855 router We use ftp on the go pro on my iphone We use the dlinkddns.com service We get no response when trying to access the b...
also, when checking the logs I see this in the ftp log:
Jan 13 18:51:24 BrookStore proftpd[11398] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 13:51:43 BrookStore proftpd[11740] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
Jan 13 13:52:02 BrookStore proftpd[11740] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 13:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
Jan 13 18:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): Preparing to chroot to directory '/home/ftp'
Jan 13 18:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER Kevin_Loiacono: Login successful.
Jan 13 13:57:31 BrookStore proftpd[11944] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
Jan 13 13:57:51 BrookStore proftpd[11944] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 18:59:27 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 14:45:11 BrookStore proftpd[986] 192.168.50.199: received SIGHUP -- master server reparsing configuration file
Jan 13 14:45:11 BrookStore proftpd[986] 192.168.50.199: 192.168.50.199:21 masquerading as 24.186.71.49
Jan 13 14:45:34 BrookStore proftpd[986] 192.168.50.199: received SIGHUP -- master server reparsing configuration file
Jan 13 14:45:34 BrookStore proftpd[986] 192.168.50.199: 192.168.50.199:21 masquerading as 24.186.71.49
Jan 13 14:47:17 BrookStore proftpd[14176] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
Jan 13 14:47:37 BrookStore proftpd[14176] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 15:18:38 BrookStore proftpd[15253] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
Jan 13 15:18:58 BrookStore proftpd[15253] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
any idea who that 166.168.50.199 is doing?
Whois Data
NetRange: 166.128.0.0 - 166.255.255.255
CIDR: 166.128.0.0/9
OriginAS:
NetName: NETBLK-CDPD-B
NetHandle: NET-166-128-0-0-1
Parent: NET-166-0-0-0-0
NetType: Direct Assignment
RegDate: 1993-07-09
Updated: 2005-01-07
Ref: http://whois.arin.net/rest/net/NET-166-128-0-0-1
OrgName: Service Provider Corporation
OrgId: SPC-10
Address: 73 Old Dublin Pike
Address: Suite 10 City: Doylestown
StateProv: PA
PostalCode: 18901-2491
Country: US
RegDate: 1993-07-09
Updated: 2009-11-16
Ref: http://whois.arin.net/rest/org/SPC-10
OrgTechHandle: WDSPC-ARIN
OrgTechName: WDSPCo Helpdesk
OrgTechPhone: +1-215-489-7599
OrgTechEmail:
OrgTechRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
OrgAbuseHandle: WDSPC-ARIN
OrgAbuseName: WDSPCo Helpdesk
OrgAbusePhone: +1-215-489-7599
OrgAbuseEmail:
OrgAbuseRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
OrgNOCHandle: WDSPC-ARIN
OrgNOCName: WDSPCo Helpdesk
OrgNOCPhone: +1-215-489-7599
OrgNOCEmail:
OrgNOCRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
RTechHandle: WDSPC-ARIN
RTechName: WDSPCo Helpdesk
RTechPhone: +1-215-489-7599
RTechEmail:
RTechRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
Jan 13 18:51:24 BrookStore proftpd[11398] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 13:51:43 BrookStore proftpd[11740] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
Jan 13 13:52:02 BrookStore proftpd[11740] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
Jan 13 13:56:47 BrookStore proftpd[11915] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 13:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
Jan 13 18:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): Preparing to chroot to directory '/home/ftp'
Jan 13 18:56:57 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER Kevin_Loiacono: Login successful.
Jan 13 13:57:31 BrookStore proftpd[11944] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
Jan 13 13:57:51 BrookStore proftpd[11944] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
Jan 13 13:59:12 BrookStore proftpd[12010] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 18:59:27 BrookStore proftpd[11933] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 14:45:11 BrookStore proftpd[986] 192.168.50.199: received SIGHUP -- master server reparsing configuration file
Jan 13 14:45:11 BrookStore proftpd[986] 192.168.50.199: 192.168.50.199:21 masquerading as 24.186.71.49
Jan 13 14:45:34 BrookStore proftpd[986] 192.168.50.199: received SIGHUP -- master server reparsing configuration file
Jan 13 14:45:34 BrookStore proftpd[986] 192.168.50.199: 192.168.50.199:21 masquerading as 24.186.71.49
Jan 13 14:47:17 BrookStore proftpd[14176] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
Jan 13 14:47:37 BrookStore proftpd[14176] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session opened.
Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): USER anonymous: no such user found from 24.186.71.49 [24.186.71.49] to 192.168.50.199:21
Jan 13 14:52:21 BrookStore proftpd[14357] 192.168.50.199 (24.186.71.49[24.186.71.49]): FTP session closed.
Jan 13 15:18:38 BrookStore proftpd[15253] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session opened.
Jan 13 15:18:58 BrookStore proftpd[15253] 192.168.50.199 (166.137.138.243[166.137.138.243]): FTP session closed.
any idea who that 166.168.50.199 is doing?
Whois Data
NetRange: 166.128.0.0 - 166.255.255.255
CIDR: 166.128.0.0/9
OriginAS:
NetName: NETBLK-CDPD-B
NetHandle: NET-166-128-0-0-1
Parent: NET-166-0-0-0-0
NetType: Direct Assignment
RegDate: 1993-07-09
Updated: 2005-01-07
Ref: http://whois.arin.net/rest/net/NET-166-128-0-0-1
OrgName: Service Provider Corporation
OrgId: SPC-10
Address: 73 Old Dublin Pike
Address: Suite 10 City: Doylestown
StateProv: PA
PostalCode: 18901-2491
Country: US
RegDate: 1993-07-09
Updated: 2009-11-16
Ref: http://whois.arin.net/rest/org/SPC-10
OrgTechHandle: WDSPC-ARIN
OrgTechName: WDSPCo Helpdesk
OrgTechPhone: +1-215-489-7599
OrgTechEmail:
OrgTechRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
OrgAbuseHandle: WDSPC-ARIN
OrgAbuseName: WDSPCo Helpdesk
OrgAbusePhone: +1-215-489-7599
OrgAbuseEmail:
OrgAbuseRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
OrgNOCHandle: WDSPC-ARIN
OrgNOCName: WDSPCo Helpdesk
OrgNOCPhone: +1-215-489-7599
OrgNOCEmail:
OrgNOCRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
RTechHandle: WDSPC-ARIN
RTechName: WDSPCo Helpdesk
RTechPhone: +1-215-489-7599
RTechEmail:
RTechRef: http://whois.arin.net/rest/poc/WDSPC-ARIN
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
