Am I hacked?

Hi there

Just checked /var/log/messages file and notice there hundreds of lines like:

Jan 26 16:19:35 galaxy proftpd[11263]: galaxy.domain.com (localhost[127.0.0.1]) - FTP session opened.
Jan 26 16:19:35 galaxy proftpd[11263]: galaxy.domain.com (localhost[127.0.0.1]) - FTP session closed.

What is this? Did somebody hack me or what? I didn't connect to ftp server through localhost.

Thanks

 

 

 

 

Top