[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Possible hacked?!



On 08/06/03 0:03, "Gerald Waugh" <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

>> --SNIP--
>> Jun  6 17:52:16 ns1 proftpd[8271]: 213.xxx.xxx.xxx
>> (0xc3f9c758.banxr3.ras.tele.dk[195.249.199.88]) - FTP session opened.
>> Jun  6 17:52:17 ns1 proftpd[8271]: 213.xxx.xxx.xxx
>> (0xc3f9c758.banxr3.ras.tele.dk[195.249.199.88]) - ProFTPD terminating
>> (signal 11)
> 
> signal 11 is kind of ODD!
> Was it a legitimate user accessing ftp?
> Do you get this error often?

I'm not sure if the user is legitimate - i suppose it's one of the v-users
on the server.
As far as i can see there's a lot of entries in the logfile.

René