Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Possible Duplicate:
My server’s been hacked EMERGENCY
Portscan attacks from somewhere

I am using Hetzner's dedicated servers. Today I have got a message:

We have received information that there was an attack from your server.

----- attachment -----

##########################################################################
#               Netscan detected from host      ?.?.?.?                  #
##########################################################################

time                protocol src_ip src_port          dest_ip dest_port
---------------------------------------------------------------------------
Thu Dec  6 09:52:00 2012 TCP         ?.?.?.? 52204 =>     68.64.12.28 21   
Thu Dec  6 09:52:00 2012 TCP         ?.?.?.? 53276 =>     68.64.12.29 21   
Thu Dec  6 09:52:00 2012 TCP         ?.?.?.? 47344 =>     68.64.12.30 21   
...

How can I find out what is causing the problem and how do I fix it?

Thanks in advance, Etam.

share|improve this question

marked as duplicate by Jeff Ferland, Michael Hampton, mdpc, Ward, voretaq7 Dec 7 '12 at 3:11

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

Do you have any network logging enabled? Does your host? Finding information after-the fact can be hard if you hadn't enabled verbose logging ahead of time.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.