Malicious Outgoing Connection to another server

T

thewm

Registered
Jan 15, 2019
1
0
1
India
cPanel Access Level
Root Administrator
Hi,
There was a malicious outgoing connection from my Cpanel server to an another server's FTP port. My server has about 200 shared hosting accounts of my clients. How can I check which user/account sent this outgoing FTP request.

Please suggest.
 
cPanelLauren

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,301
363
Houston
Hello @thewm

FTP related logs should be present in
Code: 
/var/log/messages
If you're in communication with the other server they should be able to tell you the time/date/user of the connection which you can then use to correlate to ftp transactions at the same time on your server. You might want to enlist the assistance of a qualified system administrator for this. If you don't have one you might find one here: System Administration Services | cPanel Forums

Thanks!
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
J crawler looks malicious but attacker says not Security 2
A Malicious activity has been detected Security 1
B Is anyone here able to set up modsecurity so it scans file uploads in real time and rejects malicious ones. Security 1
F Shared Hosting, PHP Version Changed, Accidental or Malicious? Security 1
P Search for a malicious mail script Security 4
Similar threads
crawler looks malicious but attacker says not
Malicious activity has been detected
Is anyone here able to set up modsecurity so it scans file uploads in real time and rejects malicious ones.
Shared Hosting, PHP Version Changed, Accidental or Malicious?
Search for a malicious mail script
Top Bottom