hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Is someone peeking in ???
Reply

Forum Jump

Is someone peeking in ???

Reply Post New Thread In Hosting Security and Technology Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 07-14-2004, 09:17 AM
atul atul is offline
Web Hosting Guru
 
Join Date: Apr 2004
Location: India
Posts: 292

Is someone peeking in ???


Hello All,
Today I checked my xferlogs and i found these lines in large number in that.
Wed Jul 14 06:07:18 2004 0 x.x.x.x 45 /home/catchfil/public_html/images/doted1.gif b _ i r catchfil ftp 1 * c
Wed Jul 14 06:07:24 2004 0 x.x.x.x 871 /home/catchfil/public_html/images/text_work.gif b _ i r catchfil ftp 1 * c
Wed Jul 14 06:07:18 2004 0 x.x.x.x 45 /home/catchfil/public_html/images/doted1.gif b _ i r catchfil ftp 1 * c
Wed Jul 14 06:07:24 2004 0 x.x.x.x 871 /home/catchfil/public_html/images/text_work.gif b _ i r catchfil ftp 1 * c

what are these logs sayinf about ftp of that domain?I am also giving my messgaes say :
here i am giving some messgaes i notices:
Jul 3 14:00:36 server named[458]: denied AXFR from [128.232.0.31].44650 for "AUTOSURFERCASH.COM" (not master/slave)
Jul 3 14:00:37 server named[458]: denied AXFR from [128.232.0.31].44655 for "AUTOSURFERCASH.COM" (not master/slave)


others are
Jul 9 00:24:29 server proftpd[495]: server.xxx.com - received SIGHUP -- master server
rehashing configuration file
**********
After that I see
Jul 8 06:41:12 server named[458]: reloading nameserver
Jul 8 06:41:12 server named[458]: Ready to answer queries.
Jul 8 06:41:44 server named[458]: reloading nameserver
Jul 8 06:41:44 server named[458]: Ready to answer queries.
Jul 8 06:48:20 server su: admin to root on /dev/ttyp0
Jul 8 07:05:19 server named[458]: reloading nameserver
Jul 8 07:05:19 server named[458]: Ready to answer queries.
Jul 8 07:06:05 server named[458]: reloading nameserver
Jul 8 07:06:05 server named[458]: master zone "abc.com" (IN) removed
Jul 8 07:06:05 server named[458]: Ready to answer queries.
Jul 8 07:06:05 server proftpd[495]: server.xxx.com - received SIGHUP -- master server
rehashing configuration file

The anonymous ftp is already disabled.I think someone is trying to hack the server.Or what are all these messages.
Please help
thank you.

Reply With Quote


Sponsored Links
  #2  
Old 07-14-2004, 04:35 PM
Shaw Networks Shaw Networks is offline
Hosting Specialist
 
Join Date: Sep 2003
Location: Washington, USA
Posts: 3,219
It doesn't look like someones trying to hack your server to me.

__________________
SHAW NETWORKS Simple. Professional. Reliable. Web Hosting Done Right.
Low Cost & Award-Winning: cPanel Reseller Plans 24/7/365 Live Technical Support
Website: www.shawnetworks.com Fast Response E-mail: sales @ shawnetworks.com
Sick of downtime? Fed up with excuses? Drop your host! Switch to Shaw Networks.

Reply With Quote
Reply

Related posts from TheWhir.com
Title Type Date Posted


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?