Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Am I being hacked?

Status
Not open for further replies.

raggmopp

MIS
Feb 14, 2002
40
US
Got RH Linux AS 2.1 and am running Apache 1.3 as a web server on the system.

I am getting the following listings from the logwatch application (see snippet below). Is this trouble? I do have port 80 open in the ipchains so the web connection can be accomplished.

As far as I know there should be no way to connect to a command line from http or https protocols. Has this changed? Or am I wrong?

Many thanks!

============================================================
Accepted packets from h24-87-195-143.vc.shawcable.net (24.87.195.143).
Port http (tcp,eth0,input): 6 packet(s).
Total of 6 packet(s).

Accepted packets from crawler14.googlebot.com (64.68.82.168).
Port http (tcp,eth0,input): 2 packet(s).
Total of 2 packet(s).

Accepted packets from h24-108-240-54.gv.shawcable.net (24.108.240.54).
Port http (tcp,eth0,input): 1 packet(s).
Total of 1 packet(s).

Accepted packets from cpe002078cd2acf-cm014120006580.cpe.net.cable.rogers.com (24.157.154.174).
Port http (tcp,eth0,input): 1 packet(s).
Total of 1 packet(s).

Accepted packets from c-24-8-74-89.client.comcast.net (24.8.74.89).
Port http (tcp,eth0,input): 8 packet(s).
Total of 8 packet(s).

Accepted packets from drone7.sv.av.com (216.39.50.156).
Port http (tcp,eth0,input): 2 packet(s).
Total of 2 packet(s).
 
Hi mate,

If you are running Apache on this connection, I don't see why you think there is a problem.

The above snippet shows connections to port 80, so connections to Apache.

Hope this helps

Wullie


The pessimist complains about the wind. The optimist expects it to change. The leader adjusts the sails. - John Maxwell
 
You can not draw any conclusions from this information. Info from your access_log and error_log would be more telling.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top