Loads of entries appearing for ProFTPD in var/log /messages

Virtualmin
1

|SYSTEM INFORMATION||
CentOS 7.9.2009
Webmin 1.981
Virtualmin Pro 6.17
ProFTPD 1.35

I am seeing /var/log/messages filling up with odd pairs of entries every 2/3 minutes like this:

Oct 4 12:04:00 myserver proftpd[20731]: 0.0.0.0 (127.0.0.1[127.0.0.1]) - SSH2 session opened.
Oct 4 12:04:00 myserver proftpd[20731]: 0.0.0.0 (127.0.0.1[127.0.0.1]) - SSH2 session closed.
Oct 4 12:08:04 myserver proftpd[23234]: 0.0.0.0 (127.0.0.1[127.0.0.1]) - SSH2 session opened.
Oct 4 12:08:04 myserver proftpd[23234]: 0.0.0.0 (127.0.0.1[127.0.0.1]) - SSH2 session closed.

Any idea what’s causing this? Should I be concerned? I have another nearly identical VM server that is not seeing this.

I’d appreciate any suggestions…

2

well if you read the logs it’s basically saying I want connect but have bad password so I am disconnected. that’s all

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.