• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question How to determine who has logged in to FTP and mysql

shadowgun1102

New Pleskian
Hi all!

My web server was compromised a few minutes ago. I am trying to analyze usage for this. All ports are closed to the public, only SSH, FTP and 3306 are accessible from some of my colleagues' IP addresses. I found / var / log / plesk / xferlog and there was no activity in the last 10 days. SSH is only accessible from my IP address.

Can you tell me how to check mysql access log successfully? I need to find the IP and time of all access. Is mysql recording somewhere?

Tks for reply!!
 
Back
Top