[cobalt-users] Odd activity

["Wright, Bob" <bwright@xxxxxxxxxxxxxxxxx>]

Hi guys, recently I have been placed in charge of the RAQ4 server which we
rent from an ISP... I installed logcheck and im getting a lot of weird
activity... Now I only have experience in BSD and a little Linux. I am
wondering if this web management software may be causing this. Here is a
Snippet of the logs.

Jun  1 00:15:00 f04-4-3-00-0472 proftpd[18809]: XXX.XXX.XXX
(localhost[127.0.0.1]) - FTP session opened. 
Jun  1 00:15:00 f04-4-3-00-0472 proftpd[18809]: XXX.XXX.XXX
(localhost[127.0.0.1]) - FTP session closed. 
Jun  1 00:30:01 f04-4-3-00-0472 proftpd[19399]: XXX.XXX.XXX
(localhost[127.0.0.1]) - FTP session opened. 
Jun  1 00:30:01 f04-4-3-00-0472 proftpd[19399]: XXX.XXX.XXX
(localhost[127.0.0.1]) - FTP session closed. 
Jun  1 00:45:00 f04-4-3-00-0472 proftpd[19983]: XXX.XXX.XXX
(localhost[127.0.0.1]) - FTP session opened. 

I have looked at Cron for every user and I cant find a thing... I have
looked at the ProFTP mailing list thou I doubt its a ProFTP problem but more
of a configuration problem when the isp installed the machine... Thank you
all for any advise or suggestions.

Bob Wright
Network Administrator Assistant
Liquid Control Corp.
330-494-1313 ext 234
bwright@xxxxxxxxxxxxxxxxx



----------------------------------------------------------------------------
CONFIDENTIALITY NOTICE: This message is intended only for the use
of the individual or entity to which it is addressed and may contain
information that is privileged, confidential or exempt from disclosure
under applicable law.  If the reader of this message is not the intended
recipient (or a person authorized to deliver it to the named addressee),
you are hereby notified that you are strictly prohibited from printing,
storing, disseminating, distributing or copying this communication.
If you have received this communication in error, please notify the sender
immediately by replying to the message and deleting it from your computer.
Thank You.
----------------------------------------------------------------------------