The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Is this a hacker??

Discussion in 'General Discussion' started by hjnet, May 30, 2002.

  1. hjnet

    hjnet Registered

    Joined:
    Mar 5, 2002
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    I´m getting belows email every day

    Active System Attack Alerts
    =-=-=-=-=-=-=-=-=-=-=-=-=-=
    May 22 23:58:07 server1 portsentry[1193]: attackalert: Connect from host: cm61-10-9-171.hkcable.com.hk/61.10.9.171 to TCP port: 111
    May 22 23:58:12 server1 portsentry[1193]: attackalert: Connect from host: cm61-10-9-171.hkcable.com.hk/61.10.9.171 to TCP port: 111
    May 22 23:58:12 server1 portsentry[1193]: attackalert: Host: 61.10.9.171 is already blocked. Ignoring

    and nearly at the same time, the whole server went offline and keeps offline until I restart it manually.
     
  2. haze

    haze Well-Known Member

    Joined:
    Dec 21, 2001
    Messages:
    1,550
    Likes Received:
    3
    Trophy Points:
    38
    Looks like someone scanning your server. I get these everyday.
     
  3. hjnet

    hjnet Registered

    Joined:
    Mar 5, 2002
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    I´ve heard that it is useful to close all unused ports. Any Idea how I can do this??
     
  4. haze

    haze Well-Known Member

    Joined:
    Dec 21, 2001
    Messages:
    1,550
    Likes Received:
    3
    Trophy Points:
    38
    With IPchains, which is probably already installed on your server.
     
Loading...

Share This Page