The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

how do I find out if I been hacked

Discussion in 'General Discussion' started by Silvernet_UK, Dec 2, 2002.

  1. Silvernet_UK

    Silvernet_UK Member

    Joined:
    Aug 9, 2002
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Hi,

    How would I go about finding out if my server has been hacked, what do I look out for etc...

    Regards,
    Garry
     
  2. pkuk

    pkuk Well-Known Member

    Joined:
    Nov 16, 2002
    Messages:
    65
    Likes Received:
    0
    Trophy Points:
    6
    An easy way to check for unauthorised shell access is to login and look at the last ip address which logged in as that user, you should be able to see which ip block it was from, which would tell you if it was from your normal ISP, if it's not from the same range, it would look like someone else had accessed your shell. If you want to know the IP currently assigned by your ISP and therefore the normal range, do winipcfg from a DOS prompt in Win 95,98,ME, or ipconfig/all in NT,2K or XP...
     
Loading...

Share This Page