FTP security? Urgent!

[OzBevNet]

How do you tighten your FTP security and another "newbie" question, how do you locate all these files on this domain ftp://ftp.gpsanywheretaiwan.com, I manage several other websites and you cannot gain access without the proper means, but i
think the security on this website has been breached, How does one tighten security on with FTP and how do you know your website has been hacked?

The ftp account is showing mail and other unknown material!

Someone please take a look and get back to me asap.

Peace

Bruno

[AlphaWolf]

The best way to tighten security on a website is to create FTP users in Cpanel and make sure they can ONLY access specific directories.

If you FTP in using the main account name and password, you will always have access to all directories.  We only use ProFTP for our servers, which is the most secure FTP protocol, but your site is only as secure as you make the password for the main account name.  We also recommend that everyone disable anonymous FTP from their accounts.

As for knowing if you have been hacked, there is no way we can tell you that unless someone hacks you and initiates a program that skyrockets your CPU or RAM usage to that it sets off our alarms for over use of resources.  Even then it can take us HOURS to figure out which account is the culprit since if they use an application that is 'run' as a server account vs run under your user name, we have to pour through logs to find what is going on.

If someone tries to hack in by trying multiple passwords and user names via FTP or SSH, our firewalls automatically block that particular IP address from further attempts.  That is helpful, sometimes...

Peace

Wolf