Check /var/log/xferlog for FTP traffic. Also, make sure you have the lastest version of apache. Anything earlier than 1.3.27 and you are wide open to a huge security hole. There are hack-kits out there that any moron can install and hack apache < 1.3.27. So make sure your apache is update to date!!!