Is My ProFTPD Server Hacked?

General Discussion
1

I see many this line on /var/log/proftpd/tls.log :

2024-11-23 05:15:48,877 mod_tls/2.9.2[660034]: TLSv1.3 connection accepted, using cipher TLS_AES_256_GCM_SHA384 (256 bits)

but since first install i never make Ftp connection, and when i try make connection get warning server does not support ftp over tls

Thanks.

2

What makes you think ProFTPd has been hacked?

3

I see tls log Connection Accepted but i never make connection.

And when i try make connection get warning server does not support ftp over tls

Thanks.

4

try changing to SFTP instead of FTP that fixed all the issues I had, but to be fair I tend to use the webmin/virtualmin file manager to do file transfers rather than filezilla etc

5

I think someone tried to access the port. Just because the connection was accepted it doesn’t mean it authenticated. Are you using fail2ban? Check those logs as well.