Hi, Dont know if I am posting this in the right place, but the following.. I am allready running ISPConfig for over a half year without any problems it is a wonderfull peace of software and it made my life a lot easier, but today when I was checking the log /var/log/messages I found the following entries could somebody please explain me what this is and how to block this ?? Code: May 28 20:15:15 server1 -- MARK -- May 28 20:30:01 server1 /usr/sbin/cron[10793]: (root) CMD (/root/ispconfig/php/php /root/ispconfig/scripts/shell/check_services.php &> /dev/null) May 28 20:30:01 server1 proftpd[10810]: server1.web-worlds.com (localhost[127.0.0.1]) - FTP session opened. May 28 20:30:01 server1 proftpd[10810]: server1.web-worlds.com (localhost[127.0.0.1]) - FTP session closed. May 28 20:53:55 server1 proftpd[11135]: server1.web-worlds.com (host-87-75-131-2.bulldogdsl.com[87.75.131.2]) - FTP session opened. May 28 20:53:56 server1 proftpd[11135]: server1.web-worlds.com (host-87-75-131-2.bulldogdsl.com[87.75.131.2]) - ANON anonymous: Login successful. May 28 20:53:56 server1 proftpd[11135]: server1.web-worlds.com (host-87-75-131-2.bulldogdsl.com[87.75.131.2]) - FTP session closed. May 28 20:59:01 server1 /usr/sbin/cron[11203]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly) May 28 21:00:01 server1 /usr/sbin/cron[11222]: (root) CMD (/root/ispconfig/php/php /root/ispconfig/scripts/shell/check_services.php &> /dev/null) May 28 21:00:01 server1 proftpd[11234]: server1.web-worlds.com (localhost[127.0.0.1]) - FTP session opened. May 28 21:00:01 server1 proftpd[11234]: server1.web-worlds.com (localhost[127.0.0.1]) - FTP session closed. May 28 21:15:15 server1 -- MARK -- May 28 21:30:01 server1 /usr/sbin/cron[11747]: (root) CMD (/root/ispconfig/php/php /root/ispconfig/scripts/shell/check_services.php &> /dev/null) May 28 21:30:01 server1 proftpd[11763]: server1.web-worlds.com (localhost[127.0.0.1]) - FTP session opened. May 28 21:30:01 server1 proftpd[11763]: server1.web-worlds.com (localhost[127.0.0.1]) - FTP session closed. May 28 21:50:32 server1 proftpd[12052]: server1.web-worlds.com (host-87-75-131-2.bulldogdsl.com[87.75.131.2]) - FTP session opened. May 28 21:50:32 server1 proftpd[12052]: server1.web-worlds.com (host-87-75-131-2.bulldogdsl.com[87.75.131.2]) - ANON anonymous: Login successful. May 28 21:50:34 server1 proftpd[12052]: server1.web-worlds.com (host-87-75-131-2.bulldogdsl.com[87.75.131.2]) - FTP session closed. May 28 21:59:01 server1 /usr/sbin/cron[12162]: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly) May 28 22:00:01 server1 /usr/sbin/cron[12179]: (root) CMD (/root/ispconfig/php/php /root/ispconfig/scripts/shell/check_services.php &> /dev/null) May 28 22:00:01 server1 proftpd[12191]: server1.web-worlds.com (localhost[127.0.0.1]) - FTP session opened. May 28 22:00:01 server1 proftpd[12191]: server1.web-worlds.com (localhost[127.0.0.1]) - FTP session closed. May 28 22:15:15 server1 -- MARK -- It is mostly the login successful that concernes me... Thanks for your time, Web Worlds
