Core FTP

hi,
if anyone tries to access/hack the server
for each attempt a user folder is created by the server,
although access is denied the folder remains ...

is there somthing to prevent those folders from being created,
besides changing the user context of the service ?

help will be appreciated

hi,
it is a SSH/SFTP

the settings are :
allow key authentication = on
...key only = off
winnt users = off
enable AD users = on
ignore AD home = on
use domain = set
use base dir+user = on

the service is running as localsystem


i even wonder why it is creating a user dir
before the user is authenticated ?

thx