Results 1 to 2 of 2
  1. #1
    Join Date
    Apr 2004
    Location
    India
    Posts
    292

    Is someone peeking in ???

    Hello All,
    Today I checked my xferlogs and i found these lines in large number in that.
    Wed Jul 14 06:07:18 2004 0 x.x.x.x 45 /home/catchfil/public_html/images/doted1.gif b _ i r catchfil ftp 1 * c
    Wed Jul 14 06:07:24 2004 0 x.x.x.x 871 /home/catchfil/public_html/images/text_work.gif b _ i r catchfil ftp 1 * c
    Wed Jul 14 06:07:18 2004 0 x.x.x.x 45 /home/catchfil/public_html/images/doted1.gif b _ i r catchfil ftp 1 * c
    Wed Jul 14 06:07:24 2004 0 x.x.x.x 871 /home/catchfil/public_html/images/text_work.gif b _ i r catchfil ftp 1 * c

    what are these logs sayinf about ftp of that domain?I am also giving my messgaes say :
    here i am giving some messgaes i notices:
    Jul 3 14:00:36 server named[458]: denied AXFR from [128.232.0.31].44650 for "AUTOSURFERCASH.COM" (not master/slave)
    Jul 3 14:00:37 server named[458]: denied AXFR from [128.232.0.31].44655 for "AUTOSURFERCASH.COM" (not master/slave)


    others are
    Jul 9 00:24:29 server proftpd[495]: server.xxx.com - received SIGHUP -- master server
    rehashing configuration file
    **********
    After that I see
    Jul 8 06:41:12 server named[458]: reloading nameserver
    Jul 8 06:41:12 server named[458]: Ready to answer queries.
    Jul 8 06:41:44 server named[458]: reloading nameserver
    Jul 8 06:41:44 server named[458]: Ready to answer queries.
    Jul 8 06:48:20 server su: admin to root on /dev/ttyp0
    Jul 8 07:05:19 server named[458]: reloading nameserver
    Jul 8 07:05:19 server named[458]: Ready to answer queries.
    Jul 8 07:06:05 server named[458]: reloading nameserver
    Jul 8 07:06:05 server named[458]: master zone "abc.com" (IN) removed
    Jul 8 07:06:05 server named[458]: Ready to answer queries.
    Jul 8 07:06:05 server proftpd[495]: server.xxx.com - received SIGHUP -- master server
    rehashing configuration file

    The anonymous ftp is already disabled.I think someone is trying to hack the server.Or what are all these messages.
    Please help
    thank you.

  2. #2
    Join Date
    Sep 2003
    Location
    Washington, USA
    Posts
    3,219
    It doesn't look like someones trying to hack your server to me.
    ‹‹SHAW NETWORKS›› Simple. Professional. Reliable. Web Hosting Done Right.
    Low Cost & Award-Winning: cPanel Reseller Plans ›› 24/7/365 Live Technical Support ‹‹
    Website: www.shawnetworks.com Fast Response E-mail: sales @ shawnetworks.com
    Sick of downtime? Fed up with excuses? Drop your host! Switch to Shaw Networks.

  3. Newsletters

    Subscribe Now & Get The WHT Quick Start Guide!

Related Posts from theWHIR.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •