Did They Logged In
Jul 7, 2007
I just check server logs today and found this:
Seems like someone else logged in to my server via FTP.
Since i only limited my IP to login to server Via FTP, SSH... using APF
But now, beside my IP, there's a few of connections from different IPs.
- Does that mean they logged in?
- What is the localhost login there?
Quote:
--------------------- Connections (secure-log) Begin
------------------------
Connections:
Service ftp [Connection(s) per day]:
My IP---> xx.xx.xxx.75
(CPE001xxxxxx-CM0011axxxxxxxx.cpe.net.cable.rogers.com): 4 Time(s)
125.234.3.44 (125.234.3.44.adsl.viettel.vn): 5 Time(s)
125.234.7.126: 1 Time(s)
125.234.13.160 (125.234.13.160.adsl.viettel.vn): 6 Time(s)
125.235.214.42 (dynamic-adsl-hni.vietel.com.vn): 2 Time(s)
222.252.35.156 (localhost): 7 Time(s)
222.252.91.206 (localhost): 11 Time(s)
222.253.167.25 (localhost): 6 Time(s)
222.254.76.7: 4 Time(s)
222.254.82.115: 8 Time(s)
Total Connections: 54
Service smtp [Connection(s) per day]:
24.110.34.203 (user-0c6s8mb.cable.mindspring.com): 1 Time(s)
65.28.34.116 (CPE-65-28-34-116.kc.res.rr.com): 1 Time(s)
72.184.44.3 (cpe-72-184-44-3.tampabay.res.rr.com): 1 Time(s)
74.67.7.155 (cpe-74-67-7-155.nycap.res.rr.com): 1 Time(s)
77.200.254.128 (128.254.200-77.rev.gaoland.net): 1 Time(s)
85.100.236.104 (dsl.dynamic85100236104.ttnet.net.tr): 1 Time(s)
86.129.186.224
(host86-129-186-224.range86-129.btcentralplus.com): 1 Time(s)
87.69.20.83 (87.69.20.83.cable.012.net.il): 1 Time(s)
132.248.77.252: 1 Time(s)
196.206.107.57 (adsl196-57-107-206-196.adsl196-4.iam.net.ma): 1
Time(s)
201.40.68.18 (201-40-68-18.mganm300.ipd.brasiltelecom.net.br): 1
Time(s)
207.63.250.11 (border.unit5.org): 1 Time(s)
211.208.200.2: 1 Time(s)
216.167.219.22 (216-167-219-22.chaska.net): 1 Time(s)
218.85.56.241
(241.56.85.218.broad.fz.fj.dynamic.163data.com.cn): 8 Time(s)
Total Connections: 22
---------------------- Connections (secure-log) End
-------------------------
View 0 Replies
Jun 27, 2007
Our web developer is logging in as root through SSH but log files do not show a record. We are getting the normal email notification but last & last -a does not show that they have logged in. Anyone seen this before?
View 7 Replies
View Related
Sep 20, 2007
Am running FreeBSD and MySQL. How do i check the login history for MySQL?
View 2 Replies
View Related
Mar 20, 2008
For some odd reason, when I run: chmod 4755 /usr/bin/crontab
in ssh, it still does not change it to 4755. It's like I don't have permission to change it, ans I'm logged in as root.
I've read some threads here on the forum and none really come to an issue where when they run that chmod 4755 /usr/bin/crontab it still doesn't chmod it.
So is there a way to check if it is chmodded to 4755 as I use CSF Exploerer to check if it is chmod'd to 4755, and it just stays at 755.
View 6 Replies
View Related
Sep 12, 2013
I would like to do do following using basic authentication:
1. non authenticated users have access to the index page: [URL] .....
2. there are other pages, e.g: [URL] .... but these would require basic auth
3. if users are not authenticated they would be redirected to [URL] .... otherwise authenticated users would have access to [URL] .... or anything else under that domain
View 1 Replies
View Related
Feb 26, 2015
I'm running Plesk 12.0.18 Update #36 on CentOS 6.6 and when I log in, after just a minute of inactivity or so I get logged out.
The period of inactivity is set to 60 minutes, so that shouldn't be the problem.
View 7 Replies
View Related
Jul 18, 2013
I use Basic Auth to limit access to a web site. This seems to work ok. I noticed though in the logs that the logged in user is not logged:
80.....188 - - [16/Jul/2013:09:56:29 +0200] "GET ..." 200 1844 "...." " ...
I would expect the second - to be replaced by the logged in user. The doc says, the user is logged if the document is protected. I do protect the whole directory using directory match. Without log in I fail to retrieve the document in question.
View 4 Replies
View Related
Feb 19, 2015
On our instance (Plesk 12 / Debian) I am logged out within 1 or 2 minutes quite often while working on config of the primary website (admin access). The session idle time is set to the 30 min default, and the problem isn't to do with changing IP addresses - the multiple sessions visible all have the same IP address.
This happens so constantly it is difficult do any real work. Where is the logic of session creation and termination? What do we need to look at to deal with this problem? We have root access.
View 10 Replies
View Related