RE: Strange FTP logs

["JP Garcia" <jgarcia () networkadvocates com>]

Rob,

Sniffing an FTP password is surprisingly trivial given the tools that
exist today.  I'd be inclined to agree with Andrew when he says that
it's likely that your IP/UID/pass got posted somewhere, and that they
were doing some recon on your system and looking for goodies.  It may be
advisable to either:

-Set your firewall to only allow FTP traffic from "trusted IPs"

Or

-Switch to SCP

Cheers,
-JP