FTP Anonymous Login Checker

Stay Up To Date
Asset Type


Need Membership


Asset Verify


API Support


Estimate Time (Second)


FTP Anonymous Login Checker Detail

Some anonymous FTP servers do not require user authentication for file access. These servers permit anonymous ftp login activities. If you don’t have a specific purpose, you should not let anonymous login to your FTP server. You can use this tool to undertake a login checker  whether your FTP servers permits anonymous login.

What is FTP?

FTP (File Transfer Protocol) is a protocol that enables file transfer between the server and the client. For example, you can transfer the files created for your website to your server with FTP protocol.

You can connect to the FTP server by using FTP clients with graphical interface (ex. Filezilla, CuteFTP, Cyberduck), by using the command line (ex. bash, iterm, powershell) or by using your browser.

It is important to know that FTP works by using TCP and does not encrypt during transfer (a cleartext protocol).


What is  FTP Anonymous Login Vulnerability?

Some FTP servers permit anonymous login activities. This is generally used by FTP servers that are required to be accessed by everyone. Because when you want to share a file on FTP, it is not possible to give everyone a username and password. But if the FTP server is not configured correctly, it might let anonymous ftp login activities even if you don’t want such activities. In this case, people with malicious intent might access to your files. Anonymous FTP vulnerability is an important vulnerability frequently browsed by attackers on the internet.


How To Check FTP Anonymous Login Vulnerability?

You can use our free Anonymous FTP Vulnerability Control tool online to easily check Anonymous FTP login vulnerability. To do this, you can start by typing your domain name in the form on top of the page and start scanning.

Or you can run nmap --script ftp-anon -p 21 target command on the nmap tool which can be installed to all operating systems.

Also, you can use ftp/anonymous auxiliary module of “Metasploit Framework” to check the vulnerability.

Lastly, you can use any FTP client that enables running FTP commands for manual check. If your FTP server is impacted from this vulnerability, you will have a result similar to the following:


            ftp securityforeveryone.com
            Connected to
            Name ( anonymous
            331 Anonymous login ok, send your password
            230-Welcome to the securityforeveryone's FTP Server
If you are using the Windows operating system, you can check this with Filezilla, CuteFTP, Cyberduck etc. that has a graphical interface.

Some Advice for Common Problems

If your FTP server permits anonymous login activities, you can eliminate the vulnerability by applying the following recommendations.

  1. If you are not using this service, deactivate it. Shutting down the unused services is one of the first steps for a securer operating system.
  2. When unnecessary, anonymous login requests are declined by the server. You might need to change the settings and/or remove default accounts.
  3. Additionally, every user should have a strong password to access the system.

Community Discussions

Need a Full Assesment?

Get help from professional hackers. Learn about our penetration test service now!

Request Pentest Service