FTP Anonymous Login Checker
Check whether an FTP server accepts anonymous logins — a common misconfiguration and potential security risk.
What is anonymous FTP?
Anonymous FTP allows users to connect to an FTP server without a personal account, using the username anonymous and any string (typically an email address) as the password. It was historically used to distribute public software but is now considered a security risk on servers that host sensitive data.
Why check for anonymous access?
- Unintended anonymous access can expose private files to the public internet.
- Attackers use anonymous FTP to upload malware or use the server as a staging point.
- Many compliance frameworks (PCI-DSS, HIPAA) require anonymous FTP to be disabled.