Hey there, did anybody encounter the above problem? I'm running OSSEC 2.6 on a VPS for private purposes. Since installing/enabling Pro-FTPd, my OSSEC install ist freaking out. It sends Level 12 messages and keeps my cellphone busy:
OSSEC HIDS Notification. 2011 Nov 29 22:03:46 Received From: vXXXXX.1blu.de->/var/log/proftpd/proftpd.log Rule: 40101 fired (level 12) -> "System user successfully logged to the system." Portion of the log(s): Nov 29 22:03:45 vXXXXX.1blu.de<http://vXXXXX.1blu.de/> proftpd[1297] vXXXXX.1blu.de<http://vXXXXX.1blu.de/> (crawl-66-249-68-151.googlebot.com<http://crawl-66-249-68-151.googlebot.com>[::ffff:66.249.68.151]): ANON ftp: Login successful. Sorry, if this issue has already been discussed but I wonder if these false positives have been encountered before. With kind regards Lukas Th. Hey Kommunales Rechenzentrum Minden-Ravensberg / Lippe Tel.: 05261 / 252-363 Fax: 05261 / 932-363 E-Mail: [email protected]<mailto:[email protected]> http://www.krz.de<http://www.krz.de/> Immer up to date sein? update newsletter hier abonnieren!<https://www.db.krz.de/bestellung_updateletter/> * Bitte prüfen, ob diese Mail wirklich ausgedruckt werden muss!
