Help - Search - Members - Calendar
Full Version: /var/log/messages
The Planet Forums > Security > General Security
qwertyjoe
I was looking at this file..../var/log/messages and got the information below. Does that mean this IP logged on to my server or attempted to? I'm wondering if I've been broken into? Thanks for any light on the subject.


Feb 17 06:08:36 mywebsite pure-ftpd: (?@196.34.124.58) [INFO] New connection from 196.34.124.58
Feb 17 06:08:36 mywebsite pure-ftpd: (?@196.34.124.58) [INFO] Logout.
Feb 17 06:08:36 mywebsite pure-ftpd: (?@196.34.124.58) [INFO] New connection from 196.34.124.58
Feb 17 06:08:36 mywebsite pure-ftpd: (?@196.34.124.58) [INFO] Logout.
XGhozt
I see that stuff all the time, I don't think it's a problem unless you're not expecting someone to be connecting to FTP? Sometimes it can be that whoever that is just left their FTP Client open and it reconnects every once in a while.
qwertyjoe
Thanks for the reply, XGhozt. I thought it was probably nothing but wasn't for sure and wanted to check.
markcausa
Yep, he's right. Nothing to fret about. smile.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.