Hi,

New at this - does this mean what I think it does?

Did the guy actually get in, or is this just a record of an attempt to get 
in, and not necessarily a successful one?

I just installed logcheck, and my paranoia is excessive.

Jun 27 17:26:24 ns proftpd[24660]: myip.myip.myip.myip 
(dnhz02by24ol.bc.hsia.telus.net[216.232.85.61]) - FTP session opened.
Jun 27 17:26:24 ns proftpd[24661]: myip.myip.myip.myip 
(dnhz02by24ol.bc.hsia.telus.net[216.232.85.61]) - FTP session opened.
Jun 27 17:26:25 ns proftpd[24660]: myip.myip.myip.myip 
(dnhz02by24ol.bc.hsia.telus.net[216.232.85.61]) - FTP session closed.
Jun 27 17:27:52 ns proftpd[24661]: myip.myip.myip.myip 
(dnhz02by24ol.bc.hsia.telus.net[216.232.85.61]) - FTP session closed.

(manually took out my ip address, doubt it makes any difference.)

rgds

Alan MacDonald
--
Webmaster - aceposition.com
[EMAIL PROTECTED]
+353 51 855 939

_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to