[sallen812]

It looks like I have a hacker getting into my C-panel server.

Here is the Var/log/messages section that logs the Pure ftp session. Is there a way to stop this?

Jun 24 04:01:37 server pure-ftpd: (?@59.93.71.35) [INFO] New connection from 59.93.71.35
Jun 24 04:01:38 server pure-ftpd: (?@59.93.71.35) [INFO] sallenus is now logged in
Jun 24 04:01:41 server pure-ftpd: (sallenus@59.93.71.35) [INFO] Logout.
Jun 24 04:01:44 server pure-ftpd: (?@89.36.138.87) [INFO] New connection from 89.36.138.87
Jun 24 04:01:44 server pure-ftpd: (?@89.36.138.87) [INFO] sallenus is now logged in
Jun 24 04:01:46 server pure-ftpd: (sallenus@89.36.138.87) [NOTICE] /home/sallenus//public_html/index.php downloaded (872 bytes, 50.85KB/sec)
Jun 24 04:01:46 server pure-ftpd: (sallenus@89.36.138.87) [INFO] Logout.
Jun 24 04:01:54 server pure-ftpd: (?@202.150.113.249) [INFO] New connection from 202.150.113.249
Jun 24 04:01:56 server pure-ftpd: (?@202.150.113.249) [INFO] sallenus is now logged in
Jun 24 04:02:04 server named[12119]: lame server resolving '21.229.108.59.in-addr.arpa' (in '229.108.59.in-addr.arpa'?): 219.232.48.62#53
Jun 24 04:02:05 server pure-ftpd: (sallenus@202.150.113.249) [NOTICE] /home/sallenus//public_html/index.php uploaded (950 bytes, 0.28KB/sec)
Jun 24 04:02:06 server pure-ftpd: (sallenus@202.150.113.249) [INFO] Logout.
Jun 24 04:02:09 server pure-ftpd: (?@75.187.192.237) [INFO] New connection from 75.187.192.237
Jun 24 04:02:10 server pure-ftpd: (?@75.187.192.237) [INFO] sallenus is now logged in
Jun 24 04:02:12 server pure-ftpd: (sallenus@75.187.192.237) [NOTICE] /home/sallenus//public_html/html/index.html downloaded (1370 bytes, 30.04KB/sec)
Jun 24 04:02:12 server pure-ftpd: (sallenus@75.187.192.237) [INFO] Logout.
Jun 24 04:02:15 server pure-ftpd: (?@88.109.5.212) [INFO] New connection from 88.109.5.212
Jun 24 04:02:16 server pure-ftpd: (?@88.109.5.212) [INFO] sallenus is now logged in
Jun 24 04:02:18 server pure-ftpd: (sallenus@88.109.5.212) [NOTICE] /home/sallenus//public_html/html/index.html uploaded (1449 bytes, 4.79KB/sec)
Jun 24 04:02:18 server pure-ftpd: (sallenus@88.109.5.212) [INFO] Logout.
Jun 24 04:02:21 server pure-ftpd: (?@75.187.192.237) [INFO] New connection from 75.187.192.237
Jun 24 04:02:21 server pure-ftpd: (?@75.187.192.237) [INFO] sallenus is now logged in
Jun 24 04:02:23 server pure-ftpd: (sallenus@75.187.192.237) [NOTICE] /home/sallenus//public_html/suspended.page/index.html downloaded (3494 bytes, 69.96KB/sec)
Jun 24 04:02:24 server pure-ftpd: (sallenus@75.187.192.237) [INFO] Logout.
Jun 24 04:02:26 server pure-ftpd: (?@91.64.208.10) [INFO] New connection from 91.64.208.10
Jun 24 04:02:27 server pure-ftpd: (?@91.64.208.10) [INFO] sallenus is now logged in
Jun 24 04:02:29 server pure-ftpd: (sallenus@91.64.208.10) [NOTICE] /home/sallenus//public_html/suspended.page/index.html uploaded (3561 bytes, 7.29KB/sec)
Jun 24 04:02:30 server pure-ftpd: (sallenus@91.64.208.10) [INFO] Logout.
Jun 24 04:02:32 server pure-ftpd: (?@86.20.64.110) [INFO] New connection from 86.20.64.110
Jun 24 04:02:33 server pure-ftpd: (?@86.20.64.110) [INFO] sallenus is now logged in
Jun 24 04:02:35 server pure-ftpd: (sallenus@86.20.64.110) [NOTICE] /home/sallenus//public_html/themes/engines/phptemplate/default.tpl.php downloaded (128 bytes, 5.42KB/sec)
Jun 24 04:02:35 server pure-ftpd: (sallenus@86.20.64.110) [INFO] Logout.
Jun 24 04:02:38 server pure-ftpd: (?@92.84.250.31) [INFO] New connection from 92.84.250.31
Jun 24 04:02:38 server pure-ftpd: (?@92.84.250.31) [INFO] sallenus is now logged in
Jun 24 04:02:41 server pure-ftpd: (sallenus@92.84.250.31) [NOTICE] /home/sallenus//public_html/themes/engines/phptemplate/default.tpl.php uploaded (238 bytes, 0.83KB/sec)
Jun 24 04:02:41 server pure-ftpd: (sallenus@92.84.250.31) [INFO] Logout.