BACKDOR ??

["Eduard Meiler" <edik () meiler org>]

Hallo all,



can somebody understand what happend ?

regards

Eduard

Oct 29 20:42:57 wall proftpd[5899]: connect from 217.120.134.101
(217.120.134.101)

Oct 29 20:43:03 wall proftpd[5899]: wall.meiler.org
(cc82466-a.ensch1.ov.nl.home.com[217.120.134.101]) - FTP session opened.

Oct 29 20:43:13 wall proftpd[5899]: wall.meiler.org
(cc82466-a.ensch1.ov.nl.home.com[217.120.134.101]) - FTP session closed.

Oct 29 20:49:57 wall snort: [1:160:1] BACKDOOR NetMetro Incoming Traffic
{TCP} 217.126.184.188:5031 -> 192.168.7.250:1839

Oct 29 20:52:19 wall snort: [1:160:1] BACKDOOR NetMetro Incoming Traffic
{TCP} 217.0.27.211:5031 -> 192.168.7.250:4520