FTP and/or Screen Sharing Logs?

Question

FTP and/or Screen Sharing Logs?

Hello again,

I finally got my Mac up-and-running with FTP File Sharing and VNC Screen Sharing wherever I am. I understand that with these options enabled, there's a marginal risk factor. I'd like to cover my rear and be able to see logs of when my Mac is accessed remotely via FTP and/or VNC Screen Sharing. Are there logs that record this?

Thanks!

iBook clamshell

Posted on Mar 31, 2010 9:24 PM

Reply

Answer 1

Mar 31, 2010 9:36 PM in response to sopranojam851

Just looking around in Console, System Log shows plenty of lines when FTP is accessed, but I can't find a darn thing when VNC was accessed. Can I enable logging for this in the Terminal? I'm sure there has to be a way.

Reply

Answer 2

temhawk

Level 1

41 points

Jun 22, 2010 4:50 PM in response to sopranojam851

I need an answer to this asap.

Somehow my Mac just got hijacked (the cursor was suddenly moving on its own and keys were entered without me actually pressing them) with Screen Sharing and I immediately disconnected the remote person as fast as I could. I'm kicking myself that I didn't take a quick screenshot when I was in the menu bar icon's menu to record the IP address, and now a log with that IP would be great, so I can hunt down whoever hacked themselves into my Mac (it was hacked, since I didn't get a confirmation popup asking me if I want to allow the other person to view/control my screen).

Reply

Answer 3

Felix T

Level 1

76 points

Aug 6, 2010 5:25 AM in response to temhawk

I just tried logging into my computer from MobileMe and had plenty of logs in the firewall section of the console. I had some for the actual connection attempt and for when the AFS connection was allowed.

You might not be able to find and ref to VPN but you should be able to get an IP if you still have the time it happened at.

In the meantime, change your session and/or admin password as well as your MobileMe password. If you're truly being hacked, it might slow down the person that's doing it.

Good luck!

Felix T

Reply