Find FTP servers with anonymous login allowed
Internet is FULL of exposed FTP servers with anonymous login allowed!
An FTP server acts as a mediator for transferring files between computers,
FTP (File Transfer Protocol, its default port is 21) is a widely adopted protocol for this purpose.
It facilitates the anonymous login feature, allowing users to access resources without revealing their identity.
After a successful login, the FTP server responds with status code 230, indicating a login was completed successfully.
Credentials for anonymous login are anonymous:guest
To connect to the server, just type ftp [hostname/address]
if you don't know FTP commands, search them on google.
Allowing anonymous access is a good idea if you don't have any sensitive data to host,
but sometimes companies leave the anonymous login allowed which may cause a potential data exfiltration.
port:21 "Login successful" and "230 User logged in" are our shodan queries.
As we can see, shodan reports more than 68k results with the first query.
[*] shodan_results.png
