LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 02-17-2011, 07:30 AM   #1
brgsousa
Member
 
Registered: Aug 2007
Location: Salvador, Brazil
Distribution: Debian, Ubuntu
Posts: 185

Rep: Reputation: 15
Several weird logins from localhost in proftp


I am using Debian 4 with proftp 1.3.1

The log file shows lots of successful logins from localhost. I never accessed ftp from localhost. Is this normal to happen?
Code:
Feb 14 11:27:22 mymachine proftpd[2453] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): USER ftpuser: Login successful.
Feb 14 14:27:22 mymachine proftpd[2453] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): Preparing to chroot to directory '/home/comunicacao/portal'
Feb 14 14:27:23 mymachine proftpd[2453] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session closed.
Feb 14 11:36:41 mymachine proftpd[2873] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session opened.
Feb 14 11:36:41 mymachine proftpd[2873] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): USER ftpuser: Login successful.
Feb 14 14:36:41 mymachine proftpd[2873] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): Preparing to chroot to directory '/home/comunicacao/portal'
Feb 14 14:36:42 mymachine proftpd[2873] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session closed.
Feb 14 15:53:42 mymachine proftpd[13637] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session opened.
Feb 14 15:53:42 mymachine proftpd[13637] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): USER ftpuser: Login successful.
Feb 14 18:53:42 mymachine proftpd[13637] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): Preparing to chroot to directory '/home/comunicacao/portal'
Feb 14 18:53:42 mymachine proftpd[13637] mymachine.mydomain.com (localhost.localdomain[127.0.0.1]): FTP session closed.
 
Old 02-17-2011, 11:19 AM   #2
thegeek
Member
 
Registered: Oct 2009
Location: Amsterdam
Distribution: CentOS,Fedora,Puppy
Posts: 62

Rep: Reputation: 20
Some cms's use an ftp layer to change files, could be that ... but is the user one you know about ?
 
1 members found this post helpful.
Old 02-17-2011, 11:25 AM   #3
brgsousa
Member
 
Registered: Aug 2007
Location: Salvador, Brazil
Distribution: Debian, Ubuntu
Posts: 185

Original Poster
Rep: Reputation: 15
You're right!
The only service that this server runs is a Joomla install
Thanks!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
apache : localhost/ works localhost/index.html does not PhilA Linux - Server 4 05-27-2007 08:32 PM
Weird webpage layout---localhost setting problem? fhleung Linux - Software 1 03-21-2006 08:07 AM
Weird - cannot connect to localhost capitalista Linux - Networking 10 12-11-2005 02:12 PM
HELP! Weird localhost/localdomain name bleed goatpiper Linux - Software 1 04-08-2005 10:01 AM
Message from syslogd@localhost localhost kernel: Disabling IRQ #21 ylts Linux - Hardware 0 02-26-2005 09:01 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration