Hi,

I run my own linux dedicated server. I'm receiving complaints from other servers host saying they are getting scan by my server on port 23222. I do not host any users in my server. Is my server hacked? What is the cause of this? Please help,

Also, I'm receiving tons of e-mail daily when I retrieve from outlook with "unsafe attachments". I believe those are virus mails?

Run nmap on it to check for open ports. If you put your ip here I can run it for you.

Thanks :)

Here's the output. Lots of strange open ports. Ask your provider if those are from PortSentry.

Port State Service
21/tcp open ftp
22/tcp open ssh
23/tcp open telnet
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop-3
111/tcp open sunrpc
119/tcp open nntp
143/tcp open imap2
443/tcp open https
3306/tcp open mysql
6666/tcp filtered irc-serv
6667/tcp filtered irc
6668/tcp filtered irc
7000/tcp filtered afs3-fileserver
7001/tcp filtered afs3-callback
7002/tcp filtered afs3-prserver
7003/tcp filtered afs3-vlserver
7004/tcp filtered afs3-kaserver
7005/tcp filtered afs3-volser
7006/tcp filtered afs3-errors
7007/tcp filtered afs3-bos
7008/tcp filtered afs3-update
7009/tcp filtered afs3-rmtsys
7010/tcp filtered ups-onlinet
8080/tcp open http-proxy

Originally posted by TheRealDeal
Here is the IP: <<removed>>

Thanks :)

check your PMS

Ok. How does a dedicated server port look like? What do they need, so I can close some ports? Also, How do I close them? :)

What do you type to get those outputs? I just installed nmap as well.

What does "filtered" / "open" mean?

Thank you for your time.

Originally posted by clocker1996


check your PMS

ok