[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Is someone getting in on my FTP?
- Subject: [cobalt-security] Is someone getting in on my FTP?
- From: Alan MacDonald <webmaster@xxxxxxxxxxxxxxx>
- Date: Thu, 27 Jun 2002 17:37:59 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi,
New at this - does this mean what I think it does?
Did the guy actually get in, or is this just a record of an attempt to get
in, and not necessarily a successful one?
I just installed logcheck, and my paranoia is excessive.
Jun 27 17:26:24 ns proftpd[24660]: myip.myip.myip.myip
(dnhz02by24ol.bc.hsia.telus.net[216.232.85.61]) - FTP session opened.
Jun 27 17:26:24 ns proftpd[24661]: myip.myip.myip.myip
(dnhz02by24ol.bc.hsia.telus.net[216.232.85.61]) - FTP session opened.
Jun 27 17:26:25 ns proftpd[24660]: myip.myip.myip.myip
(dnhz02by24ol.bc.hsia.telus.net[216.232.85.61]) - FTP session closed.
Jun 27 17:27:52 ns proftpd[24661]: myip.myip.myip.myip
(dnhz02by24ol.bc.hsia.telus.net[216.232.85.61]) - FTP session closed.
(manually took out my ip address, doubt it makes any difference.)
rgds
Alan MacDonald
--
Webmaster - aceposition.com
webmaster@xxxxxxxxxxxxxxx
+353 51 855 939