[SOLVED] Have I Been Hacked ??? Solved

[numpkin]

Hi All,

 

Just found this message in "Fix Common Problems" plug-in..... settings

 

For assistance with any of the errors / warnings displayed here, please post a new topic in General Support
For assistance with the plugin, including requests for additional checks, false positives, etc please post HERE

 

On Jul 19 there were 14 invalid login attempts. This could either be yourself attempting to login to your server (SSH / Telnet) with the wrong user or password, or you could be actively be the victim of hack attacks. A common cause of this would be placing your server within your routers DMZ, or improperly forwarding ports.

This is a major issue and needs to be addressed IMMEDIATELY

NOTE: Because this check is done against the logged entries in the syslog, the only way to clear it is to either increase the number of allowed invalid logins per day (if determined that it is not a hack attempt) or to reset your server. It is not recommended under any circumstance to ignore this error

 

Thanks for reading.

Any Help Please!!!

 

Regards

P.S how do I insert my syslog and diagnostics files in message??

 

tower-03-diagnostics-20210730-1039.zip tower-03-syslog-20210730-0938.zip

 

 

Panic update:

 

I think I've found the problem, I'll call it "Human Error" 🙂

I opened an old linux machine and ran 'Krusader' I was trying to connect to a 'windoze m/c' which had not got the correct settings to allow the linux to connect .....

 

What a 'noob' sorry

 

Regards

numpkin

(That's why I chose that user name)

 

 

Edited July 31, 2021 by numpkin
Added files and fix

[Turnspit]

To insert you logs, just drag the files into the bottom part of the editor window.

 

Do you have any part of your server exposed to the internet?

[numpkin]

Hi there,

 

Thanks for your reply.......

 

I'll insert the files into my original post ...... if possible

 

All ip's are in the 192.168.xxx.xxx so no ...

regards