FTP Intrusion Attempt - I need help
what does this mean:
Feb 15 12:25:08 sigma kernel: Packet log: input REJECT eth1 PROTO=6 69.56.161.154:41218 200.150.15.131:21 L=60 S=0x00 I=39490 F=0x4000 T=51 SYN (#32)
I got it from server Admin on "server matrix" and they will take my server off-line if I do not resolve the problem.
the problem is that I do not know what's the problem.
Later I found that I cann't change password for one user. Or....I can change it but I cann't log in with new password.
(I change it in WHM as root user)
however.... try to log in to cpanel at www.hidzab.com/cpanel
you will get this error:
---------------------------------------
Access Denied
If you have lost your password, you can reset it by Clicking Here.
---------------------------------------
Shouldn't I get only "Access Denied" message?
try to click on link and you will get:
"Password Reset
Resetting password for edin: A confirmation email has been sent to the email address on file."
(take a look at URL: http://www.hidzab.com:2082/resetpass/?user=edin"
now....
How can I log in to cpanel as user "edin" and examine if everything is normal there. (As I said, changing password in WHM doesn't help)
