Hello! Yesterday I found the following log entries: Code: Jun 6 13:27:30 web pure-ftpd: (?@*.*.*.*) [INFO] New connection from *.*.*.* Jun 6 13:27:32 web pure-ftpd: (?@*.*.*.*) [INFO] [clientname]superuser is now logged in Jun 6 13:29:10 web pure-ftpd: (?@*.*.*.*) [INFO] New connection from *.*.*.* Jun 6 13:29:11 web pure-ftpd: (?@*.*.*.*) [INFO] [clientname]superuser is now logged in Jun 6 13:29:38 web pure-ftpd: ([clientname]superuser@*.*.*.*) [INFO] Logout. ("[clientname]" is the username of the ISPConfig user) I wonder where this account comes from and where I can delete it or change the password? In ISPconfig there is only one FTP account for that user, namely '[clientname]ftp'. Any suggestions? Thank you in advance and best regards, -René
The user must be eithernin the list of ftp or ssh users. btw. "superuser" is just a name, it does not mean that this user is a superuser nor that he has any additional permisions.
Hi Till, thank you, I know it's just a name, but it's none that I've set up. So I thought maybe it's a default (autmatically generated) account. This username appears neither in Shell nor in FTP users.
There are no default FTP or shell users in ispconfig. Check the database tables "shell_user" and "ftp_user" in the ispconfig mysql database with phpmyadmin if you find a user with that name there.
