Facebook
TwitterHello,
my web server was compromised before few minutes.
I'm trying to analyze way used for this.
All ports are closed for public, only SSH, FTP and 3306 are accessible from few IP addresses of my colleagues.
I found file /var/log/plesk/xferlog and there was no activity last 10 days.
SSH is accessed only from my IP address.
Can you tell me how to check successful mysql access logs? I need to find IP and time of all accessing. Does mysql that recording somewhere?
my web server was compromised before few minutes.
I'm trying to analyze way used for this.
All ports are closed for public, only SSH, FTP and 3306 are accessible from few IP addresses of my colleagues.
I found file /var/log/plesk/xferlog and there was no activity last 10 days.
SSH is accessed only from my IP address.
Can you tell me how to check successful mysql access logs? I need to find IP and time of all accessing. Does mysql that recording somewhere?
