Am I being hacked?

[raggmopp]

Got RH Linux AS 2.1 and am running Apache 1.3 as a web server on the system.

I am getting the following listings from the logwatch application (see snippet below). Is this trouble? I do have port 80 open in the ipchains so the web connection can be accomplished.

As far as I know there should be no way to connect to a command line from http or https protocols. Has this changed? Or am I wrong?

Many thanks!

============================================================
Accepted packets from h24-87-195-143.vc.shawcable.net (24.87.195.143).
Port http (tcp,eth0,input): 6 packet(s).
Total of 6 packet(s).

Accepted packets from crawler14.googlebot.com (64.68.82.168).
Port http (tcp,eth0,input): 2 packet(s).
Total of 2 packet(s).

Accepted packets from h24-108-240-54.gv.shawcable.net (24.108.240.54).
Port http (tcp,eth0,input): 1 packet(s).
Total of 1 packet(s).

Accepted packets from cpe002078cd2acf-cm014120006580.cpe.net.cable.rogers.com (24.157.154.174).
Port http (tcp,eth0,input): 1 packet(s).
Total of 1 packet(s).

Accepted packets from c-24-8-74-89.client.comcast.net (24.8.74.89).
Port http (tcp,eth0,input): 8 packet(s).
Total of 8 packet(s).

Accepted packets from drone7.sv.av.com (216.39.50.156).
Port http (tcp,eth0,input): 2 packet(s).
Total of 2 packet(s).

 

[Wullie]

Hi mate,

If you are running Apache on this connection, I don't see why you think there is a problem.

The above snippet shows connections to port 80, so connections to Apache.

Hope this helps

Wullie

http://www.freshlookhosting.com

http://www.tutorial-world.com

http://www.freshlookdesign.co.uk

The pessimist complains about the wind. The optimist expects it to change. The leader adjusts the sails. - John Maxwell

 

[RhythmAce]

You can not draw any conclusions from this information. Info from your access_log and error_log would be more telling.