Nov 17 08:54:11 hosting pure-ftpd[13724]: (?@210.195.30.50) [WARNING] Authentication failed for user [rootbeer]
Nov 17 08:54:11 hosting pure-ftpd[13730]: (?@210.195.30.50) [INFO] New connection from 210.195.30.50
Nov 17 08:54:12 hosting pure-ftpd[13730]: (?@210.195.30.50) [WARNING] Authentication failed for user [rootbeer]
Nov 17 08:54:12 hosting pure-ftpd[13737]: (?@210.195.30.50) [INFO] New connection from 210.195.30.50
Nov 17 08:54:13 hosting pure-ftpd[13737]: (?@210.195.30.50) [WARNING] Authentication failed for user [rootbeer]
Nov 17 08:54:14 hosting pure-ftpd[13724]: (?@210.195.30.50) [INFO] Logout - CPU time spent: 0.000 seconds.
Nov 17 08:54:15 hosting pure-ftpd[13730]: (?@210.195.30.50) [INFO] Logout - CPU time spent: 0.000 seconds.
Nov 17 08:54:16 hosting pure-ftpd[13737]: (?@210.195.30.50) [INFO] Logout - CPU time spent: 0.000 seconds.
Nov 17 08:54:50 hosting pure-ftpd[13910]: (?@210.195.30.36) [INFO] New connection from 210.195.30.36
Nov 17 08:54:52 hosting pure-ftpd[13910]: (?@210.195.30.36) [WARNING] Authentication failed for user [rootbeer]
Nov 17 08:54:55 hosting pure-ftpd[13929]: (?@210.195.30.36) [INFO] New connection from 210.195.30.36
Nov 17 08:54:55 hosting pure-ftpd[13910]: (?@210.195.30.36) [INFO] Logout - CPU time spent: 0.000 seconds.
Nov 17 08:54:56 hosting pure-ftpd[13929]: (?@210.195.30.36) [WARNING] Authentication failed for user [rootbeer]
Nov 17 08:54:56 hosting pure-ftpd[13936]: (?@210.195.30.36) [INFO] New connection from 210.195.30.36
Nov 17 08:54:57 hosting pure-ftpd[13936]: (?@210.195.30.36) [WARNING] Authentication failed for user [rootbeer]
N
----
Nov 17 09:39:50 hosting pure-ftpd[25356]: (?@210.195.36.227) [INFO] New connection from 210.195.36.227
Nov 17 09:39:51 hosting pure-ftpd[25356]: (?@210.195.36.227) [INFO] rootbeer is now logged in
Nov 17 09:39:54 hosting pure-ftpd[25356]: (rootbeer@210.195.36.227) [INFO] Logout - CPU time spent: 0.000 seconds.
Nov 17 09:44:53 hosting named[2053]: client 218.111.217.111#2671: update 'lanfar.com.my/IN' denied
Nov 17 09:45:07 hosting pure-ftpd[26695]: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Nov 17 09:45:07 hosting pure-ftpd[26695]: (?@127.0.0.1) [INFO] Logout - CPU time spent: 0.000 seconds.
Nov 17 09:50:12 hosting named[2053]: client 218.111.217.111#2827: update 'lanfar.com.my/IN' denied
Nov 17 09:51:12 hosting pure-ftpd[28557]: (?@210.186.130.187) [INFO] New connection from 210.186.130.187
Nov 17 09:51:12 hosting pure-ftpd[28557]: (?@210.186.130.187) [INFO] rootbeer is now logged in
Nov 17 09:52:05 hosting pure-ftpd[28557]: (rootbeer@210.186.130.187) [NOTICE] /usr/home/rootbeer//in/str00351117095203.zipx u
ploaded (144892 bytes, 3.11KB/sec)
Nov 17 09:52:07 hosting pure-ftpd[28557]: (rootbeer@210.186.130.187) [NOTICE] File successfully renamed or moved: [str0035111
7095203.zipx]->[str00351117095203.zip]
Nov 17 09:52:07 hosting pure-ftpd[28557]: (rootbeer@210.186.130.187) [INFO] Logout - CPU time spent: 0.010 seconds.



based on the log above.. can we say that someone is spooling an IP address and trying to logon to the box using rootbeer user id? there is a lot of this type of log.. for the entire day.. what shd i do? what is he trying to do?