I was checking log files today /var/log/messages and this event happens Every 8 minutes.

I have anon. ftp disabled.

Nov 19 13:34:39 myserver pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.$
Nov 19 13:34:39 myserver pure-ftpd: (?@127.0.0.1) [INFO] Logout.

Thoughts, I know 127.0.0.1 is my server but what on earth and why every 8 minutes? crack cron job or ?

Do you have something like SIM that checks for FTP being onlne?

running cPanel by any chance? If so it is probably chkservd verifying that ftpd is still running.

I do have Cpanel and I do run SIM - these are both on all my servers but none of them has ever showed ftp logging in every 8 min. when I tail 'f /var/log/messages...

Im 99.9% your right thats it just that I have the "monitor ftp" checked in my services/monitor in cpanel.

thanks.