[xciso]

Tja.
Satt och gick igenom lite loggfiler på min vps.
Kollade i filen var/log/proftpd/auth.log och fick se detta.

ProFTPd [32239] 213.219.108.157 [06/Feb/2009:16:10:54 +0100] "PASS (hidden)" 530
ProFTPd [32239] 213.219.108.157 [06/Feb/2009:16:10:54 +0100] "USER Administrator" 331
ProFTPd [32242] 213.219.108.157 [06/Feb/2009:16:10:55 +0100] "USER Administrator" 331
ProFTPd [32242] 213.219.108.157 [06/Feb/2009:16:10:55 +0100] "PASS (hidden)" 530
ProFTPd [32242] 213.219.108.157 [06/Feb/2009:16:10:55 +0100] "USER Administrator" 331
ProFTPd [32242] 213.219.108.157 [06/Feb/2009:16:10:55 +0100] "PASS (hidden)" 530
ProFTPd [32242] 213.219.108.157 [06/Feb/2009:16:10:55 +0100] "USER Administrator" 331
ProFTPd [32251] 213.219.108.157 [06/Feb/2009:16:10:56 +0100] "USER Administrator" 331
ProFTPd [32251] 213.219.108.157 [06/Feb/2009:16:10:56 +0100] "PASS (hidden)" 530
ProFTPd [32251] 213.219.108.157 [06/Feb/2009:16:10:59 +0100] "USER Administrator" 331
ProFTPd [32251] 213.219.108.157 [06/Feb/2009:16:10:59 +0100] "PASS (hidden)" 530
ProFTPd [32251] 213.219.108.157 [06/Feb/2009:16:11:00 +0100] "USER Administrator" 331
ProFTPd [32309] 213.219.108.157 [06/Feb/2009:16:11:12 +0100] "USER Administrator" 331
ProFTPd [32309] 213.219.108.157 [06/Feb/2009:16:11:13 +0100] "PASS (hidden)" 530
ProFTPd [32309] 213.219.108.157 [06/Feb/2009:16:11:13 +0100] "USER Administrator" 331
ProFTPd [32309] 213.219.108.157 [06/Feb/2009:16:11:13 +0100] "PASS (hidden)" 530
ProFTPd [32309] 213.219.108.157 [06/Feb/2009:16:11:13 +0100] "USER Administrator" 331
ProFTPd [32353] 213.219.108.157 [06/Feb/2009:16:11:13 +0100] "USER Administrator" 331
ProFTPd [32353] 213.219.108.157 [06/Feb/2009:16:11:13 +0100] "PASS (hidden)" 530
ProFTPd [32353] 213.219.108.157 [06/Feb/2009:16:11:14 +0100] "USER Administrator" 331
ProFTPd [32353] 213.219.108.157 [06/Feb/2009:16:11:15 +0100] "PASS (hidden)" 530
ProFTPd [32353] 213.219.108.157 [06/Feb/2009:16:11:15 +0100] "USER Administrator" 331
ProFTPd [32374] 213.219.108.157 [06/Feb/2009:16:11:16 +0100] "USER Administrator" 331
ProFTPd [32374] 213.219.108.157 [06/Feb/2009:16:11:16 +0100] "PASS (hidden)" 530
ProFTPd [32374] 213.219.108.157 [06/Feb/2009:16:11:16 +0100] "USER Administrator" 331
ProFTPd [32374] 213.219.108.157 [06/Feb/2009:16:11:16 +0100] "PASS (hidden)" 530
ProFTPd [32374] 213.219.108.157 [06/Feb/2009:16:11:17 +0100] "USER Administrator" 331
ProFTPd [32572] 213.219.108.157 [06/Feb/2009:16:12:05 +0100] "USER Administrator" 331
ProFTPd [32572] 213.219.108.157 [06/Feb/2009:16:12:05 +0100] "PASS (hidden)" 530
ProFTPd [32572] 213.219.108.157 [06/Feb/2009:16:12:06 +0100] "USER Administrator" 331
ProFTPd [32572] 213.219.108.157 [06/Feb/2009:16:12:06 +0100] "PASS (hidden)" 530
ProFTPd [32572] 213.219.108.157 [06/Feb/2009:16:12:06 +0100] "USER Administrator" 331
ProFTPd [32578] 213.219.108.157 [06/Feb/2009:16:12:06 +0100] "USER Administrator" 331
ProFTPd [32578] 213.219.108.157 [06/Feb/2009:16:12:06 +0100] "PASS (hidden)" 530
ProFTPd [32578] 213.219.108.157 [06/Feb/2009:16:12:08 +0100] "USER Administrator" 331
ProFTPd [32578] 213.219.108.157 [06/Feb/2009:16:12:08 +0100] "PASS (hidden)" 530
ProFTPd [32578] 213.219.108.157 [06/Feb/2009:16:12:08 +0100] "USER Administrator" 331
ProFTPd [32594] 213.219.108.157 [06/Feb/2009:16:12:10 +0100] "USER Administrator" 331
ProFTPd [32594] 213.219.108.157 [06/Feb/2009:16:12:10 +0100] "PASS (hidden)" 530
ProFTPd [32594] 213.219.108.157 [06/Feb/2009:16:12:11 +0100] "USER Administrator" 331
ProFTPd [32594] 213.219.108.157 [06/Feb/2009:16:12:11 +0100] "PASS (hidden)" 530
ProFTPd [32594] 213.219.108.157 [06/Feb/2009:16:12:11 +0100] "USER Administrator" 331
ProFTPd [17973] 213.64.25.37 [07/Feb/2009:00:51:21 +0100] "USER KOMPIS SOM LAGGAT IN" 331
ProFTPd [17973] 213.64.25.37 [07/Feb/2009:00:51:21 +0100] "PASS (hidden)" 230
ProFTPd [19547] 83.226.250.78 [07/Feb/2009:00:52:34 +0100] "USER KOMPIS SOM LOAGGAT IN" 331
ProFTPd [19547] 83.226.250.78 [07/Feb/2009:00:52:34 +0100] "PASS (hidden)" 230
ProFTPd [5130] 213.64.25.37 [07/Feb/2009:01:45:09 +0100] "USER KOMPIS SOM LAGGAT IN" 331
ProFTPd [5130] 213.64.25.37 [07/Feb/2009:01:45:09 +0100] "PASS (hidden)" 230
ProFTPd [25805] 81.235.155.130 [07/Feb/2009:04:49:56 +0100] "USER JAG SOM LOGGAT IN" 331
ProFTPd [25805] 81.235.155.130 [07/Feb/2009:04:49:56 +0100] "PASS (hidden)" 230

ip nummer 213.219.108.157 spåras till estland, och där känner jag ingen som ska få logga in..
Är detta ett försök till intrång? Kan man förhindra detta på något sätt? Vad bör man göra åt det?