| brgsousa |
02-17-2011 06:30 AM |
Several weird logins from localhost in proftp
I am using Debian 4 with proftp 1.3.1
The log file shows lots of successful logins from localhost. I never accessed ftp from localhost. Is this normal to happen?
Code:
Feb 14 11:27:22 mymachine proftpd[2453] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): USER ftpuser: Login successful.
Feb 14 14:27:22 mymachine proftpd[2453] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): Preparing to chroot to directory '/home/comunicacao/portal'
Feb 14 14:27:23 mymachine proftpd[2453] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session closed.
Feb 14 11:36:41 mymachine proftpd[2873] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session opened.
Feb 14 11:36:41 mymachine proftpd[2873] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): USER ftpuser: Login successful.
Feb 14 14:36:41 mymachine proftpd[2873] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): Preparing to chroot to directory '/home/comunicacao/portal'
Feb 14 14:36:42 mymachine proftpd[2873] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session closed.
Feb 14 15:53:42 mymachine proftpd[13637] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session opened.
Feb 14 15:53:42 mymachine proftpd[13637] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): USER ftpuser: Login successful.
Feb 14 18:53:42 mymachine proftpd[13637] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): Preparing to chroot to directory '/home/comunicacao/portal'
Feb 14 18:53:42 mymachine proftpd[13637] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session closed.
|
