Eh? That is from my ftp log, on my ftp server, where in this case someone at 74.54.18.114 tried many times to log into my ftp server using the username "Administrator". Some clueless script kiddie.
LOL, I know, maybe I wasn't clear. theplanet.com doesn't provide access, they just do hosting AFAIK, so it's unlikely a scriptomaniac attacking your FTP server directly from their network. Could be, but I doubt it. More likely one of their web/mail/FTP servers has been compromised. And that's usually done from China or Korea these days, volume of attacks originating from there on our stuff is about 50-1 compared to other sources. Your original point is valid - if they have a server that's been compromised that's definitely a problem. The fact that they got jacked is a bigger problem.
I figured that was what you meant, but I just couldn't resist. I have it easy. All of our clients are in CONUS, so I block a ton of overseas IP groups at the firewall. Prior to that we had the same sort of ratio you mention. What do you mean? They got Apache installed and running, and even left the page up as proof of their mad skillz.
