strange ftp logins from random locations
I noticed in the logs that as soon as the domain pointed to the new location that there were ftp logins on that account from random locations from 1 country, the home country of the customer.
The logins were succesful until I changed the password for that account.
The strange thing is that every time only the login was made and then it would time out. No file transfers or anything. It seems like it was only a check to see if they could log in.
The login attempts for that user still continue (but now fail due to the changed password), every time from a different location (1 country) it seems.
I'm getting really curious what this could be. Maybe one of you have an idea?
