Knowledgebase

Portal Home > Knowledgebase > Articles Database > Is someone trying to hack or hacked my server?

Is someone trying to hack or hacked my server?

Posted by chasebug, 08-07-2010, 01:31 PM

I see this in top: That is an IP I do not recognize. Looks like somewhere from Asia. Does the connected mean that they are logged into the FTP or simply just got connection to FTP port? The FTP log does not show anything, it is empty.

---

Posted by Aigen_tech, 08-07-2010, 02:17 PM

Check the file /var/log/messages and see if any user logged in with that ip or not. You can use the following command to grep the /var/log/messages The command will show all the activities from the ip 125.xx.xxx.xxx which have been logged in the /var/log/messages.

---

Posted by boost32, 08-08-2010, 02:42 PM

These folks scan random IP addresses on the Internet to see what's out there. Don't be alarmed - it's like a dog barking in your neighborhood. He is trying to see what other dogs are out there

---

Add to Favourites    Print this Article

Windows Outsourcing Management (Views: 680)

Mod security log file question (Views: 687)

Change ownership to nobody:apache (Views: 615)

Is CybexHost.com down? (Views: 645)

Anyone using allmanaged.com for a dedicated host? (Views: 658)