2011/5/12 fqui nonez <[email protected]>:
> Hello
>
> I have a ftpd server OBSD-4.9, and i found this:
>
> # last
> ftp ftp 62.234.84.203.hostway.com.au Thu May 12 12:40 -
> 12:40 (00:00) <----------(it is not me)
>
> Could it means that i have an intrusion in the server?
>
> Where should i see? and what should i care, please?
>
> # ls -laR /home/ftp
> total 12
> drwxr-xr-x 3 root wheel 512 May 6 08:04 .
> drwxr-xr-x 4 root wheel 512 May 5 08:21 ..
> drwxr-xr-x 3 root wheel 512 May 6 08:05 pub
>
> /home/ftp/pub:
> total 12
> drwxr-xr-x 3 root wheel 512 May 6 08:05 .
> drwxr-xr-x 3 root wheel 512 May 6 08:04 ..
> drwxr-xr-x 5 root wheel 512 May 9 06:14 GSA
My mistake, i changed it to:
# ls -laR /home/ftp/
total 12
dr-xr-xr-x 3 root ftp 512 May 6 08:04 .
drwxr-xr-x 4 root wheel 512 May 5 08:21 ..
dr-xr-xr-x 3 root ftp 512 May 6 08:05 pub
/home/ftp/pub:
total 12
dr-xr-xr-x 3 root ftp 512 May 6 08:05 .
dr-xr-xr-x 3 root ftp 512 May 6 08:04 ..
dr-xr-xr-x 5 root ftp 512 May 9 06:14 GSA
/home/ftp/pub/GSA:
total 20
dr-xr-xr-x 5 root ftp 512 May 9 06:14 .
dr-xr-xr-x 3 root ftp 512 May 6 08:05 ..
dr-xr-xr-x 2 root ftp 2048 May 9 03:37 2009
dr-xr-xr-x 2 root ftp 2048 May 9 06:13 2010
dr-xr-xr-x 2 root ftp 1024 May 10 09:25 2011
Does this line is a problem? Do i have to do something more with it?
ftp ftp 62.234.84.203.hostway.com.au Thu May 12 12:40 - 12:40
(00:00) <----------(it is not me)
--
Agr. francisco Quinonez.
"Our mission, feed the World"
"notre mission, nourrir au monde"
"Nuestra mision, alimentar al mundo"
