Is My ProFTPD Server Hacked?

[vikar]

I see many this line on /var/log/proftpd/tls.log :

2024-11-23 05:15:48,877 mod_tls/2.9.2[660034]: TLSv1.3 connection accepted, using cipher TLS_AES_256_GCM_SHA384 (256 bits)

but since first install i never make Ftp connection, and when i try make connection get warning server does not support ftp over tls

Thanks.

[Joe]

What makes you think ProFTPd has been hacked?

[vikar]

I see tls log Connection Accepted but i never make connection.

And when i try make connection get warning server does not support ftp over tls

Thanks.

[jimr1]

@vikar

server does not support ftp over tls

try changing to SFTP instead of FTP that fixed all the issues I had, but to be fair I tend to use the webmin/virtualmin file manager to do file transfers rather than filezilla etc

[ID10T]

@vikar

I see tls log Connection Accepted but i never make connection.

I think someone tried to access the port. Just because the connection was accepted it doesn’t mean it authenticated. Are you using fail2ban? Check those logs as well.