Results 1 to 3 of 3
  1. #1

    I think mysql db was hacked

    Hi everyone,

    How could I check to see if a mysql database was hacked or see who the last person or IP was to login to the mysql server was? Can this be done with WHM or cPanel?

    The reason I ask is all sites on VPS account encountered mysql connection drops, then 10 minutes later all sites went down for 20 more minutes and when they came back up only one specific bit of data was missing. Data entered after the missing piece is still intact. When the sites were down I was still able to ping them with 0% loss.

    Thanks for any help.

  2. #2
    Join Date
    Feb 2002
    Location
    Vestal, NY
    Posts
    1,375
    Does anyone have a reason to sabotage your data? If there is not a good reason, it is probably some type of corruption or your host doing something weird. By default, MySQL doesn't do too much logging. I don't think records of each connection to databases is logged anywhere with any of the major control panels' default setup. You could try /var/log/mysql.log. Also check /var/log/secure for anything suspicious.
    If someone else setup your MySQL server, you might just have a query log running.. the path would be in your my.cnf file (usually in /etc or /root).
    H4Y Technologies LLC Check out our new website!
    "Smarter, Cheaper, Faster" - SMB, Reseller, VDS, Dedicated, Colo hosting done right.

    ZERO PACKETLOSS, ZERO DOWNTIME Dedicated and Colo - USA: IA, CA, NC, OR, NV
    **http://h4y.us**
    Voice: (866)435-5642. *** Email: askus at host4yourself d0t com

  3. #3
    Join Date
    Feb 2004
    Posts
    772
    Hi,

    Use 'w' in your system prompt and know the last login users. From that find the recently logged mysql time and user. Then go through the mysql and see the history of mysql queries used. Through,analyse the recently logged users and get back all the commited queries.

    Better, Secure your mysql server by giving limited priviliges.

    Regards,

    Bright

Related Posts from theWHIR.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •