I was chacking the logs on my brothers machine SME 6.01
I noticed these lines with the tail
(160.39.96.30[160.39.96.30]) - FTP session opened.
(160.39.96.30[160.39.96.30]) - FTP session closed.
These IP's are not on our local network and are not specified in the allowed access.
Does this indicate that the server has been hacked. I did notice a great deal of refused activity a couple of days ago!
Martin