Urgent Security Help Needed

ankushdawar

Member
May 11, 2003
20
0
151
India
Hi,

One of my server is lacking security .. can anyone help me locking this kind of stuff.
Some one is scanning others servers using my server.

Can anyone help.

Regards

Ankush Dawar

==========================



> Based on multiple reports from myNetWatchman users,
> we believe that the
> following host is compromised or infected:
>
>
> Time Zone: UTC
>
> Event Date Time, Destination IP, IP Protocol, Target
> Port, Issue Description, Source Port, Event Count
> EventRecord: 20 Aug 2004 20:47:42, 80.160.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 37487, 3
> EventRecord: 20 Aug 2004 20:47:42, 80.160.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 37465, 3
> EventRecord: 20 Aug 2004 20:47:42, 80.160.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 37464, 3
> EventRecord: 20 Aug 2004 20:47:41, 80.160.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 37167, 3
> EventRecord: 20 Aug 2004 20:47:41, 80.160.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 37166, 3
> EventRecord: 20 Aug 2004 20:43:12, 195.41.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL ,
> 47942, 1
> EventRecord: 20 Aug 2004 20:43:12, 195.41.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 47941, 2
> EventRecord: 20 Aug 2004 20:43:12, 195.41.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 47940, 4
> EventRecord: 20 Aug 2004 20:43:12, 195.41.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 47935, 1
> EventRecord: 20 Aug 2004 20:34:05, 66.65.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 43287, 1
> EventRecord: 13 Aug 2004 13:23:18, 81.77.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 50120, 1
> EventRecord: 13 Aug 2004 13:07:10, 80.176.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 33761, 3
> EventRecord: 13 Aug 2004 12:09:50, 81.154.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 47078, 1
> EventRecord: 13 Aug 2004 12:09:02, 81.154.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 47078, 1
> EventRecord: 13 Aug 2004 12:08:16, 81.154.x.x, 6,
> 443, HTTPS - HTTP over TLS/SSL
> , 47078, 1