I haven't seen them on the mailing list. Next time I get a chance I can investigate a bit more. On Nov 30, 2011 7:35 AM, "Hey, Lukas (KRZ)" <[email protected]> wrote:
> Hey there, > > did anybody encounter the above problem? I’m running OSSEC 2.6 on a VPS > for private purposes. Since installing/enabling Pro-FTPd, my OSSEC install > ist freaking out. It sends Level 12 messages and keeps my cellphone busy: > > OSSEC HIDS Notification. > 2011 Nov 29 22:03:46 > > Received From: vXXXXX.1blu.de->/var/log/proftpd/proftpd.log > Rule: 40101 fired (level 12) -> "System user successfully logged to the > system." > Portion of the log(s): > > Nov 29 22:03:45 *vXXXXX.1blu.de* <http://vXXXXX.1blu.de/> proftpd[1297] * > vXXXXX.1blu.de* <http://vXXXXX.1blu.de/> (* > crawl-66-249-68-151.googlebot.com*<http://crawl-66-249-68-151.googlebot.com> > [::ffff:66.249.68.151]): ANON ftp: Login successful. > Sorry, if this issue has already been discussed but I wonder if these > false positives have been encountered before. > With kind regards > *Lukas Th. Hey* > > Kommunales Rechenzentrum > Minden-Ravensberg / Lippe > > Tel.: 05261 / 252-363 > Fax: 05261 / 932-363 > E-Mail: *[email protected]* <[email protected]> > *http://www.krz.de* <http://www.krz.de/> > *Immer up to date sein? **up**date newsletter hier > abonnieren!*<https://www.db.krz.de/bestellung_updateletter/> > > > *P* *Bitte prüfen, ob diese Mail wirklich ausgedruckt werden muss!* > > > >
