A hacker in my VPS Server! Please help me stop h

Hello,

There is a hacking in my VPS Server that take everytime lines from my server. I saw the log file and found no IP, only mine, so he is using a VPN that doesn't log his IP. I already changed 4 times my password but he has everytime acces to my server. I scanned my PC with all different scanners and found no virus. Is there a way that only me can log in in my server ?

Thanks for the help!

Quote from Banny

Check your router settings mate, maybe he is getting access through there and maybe you could do something like -

Code

http://linuxsat-support.com/enigma2-tutorials/14664-how-configure-ssh-key-authentication.html

Thanks mate, i will check it now!

Quote from master G

What ports do you have open on your VPS network ?

I don't know all ports that are open, but i know for sure port 12000, 80, 22, 16001

Quote from master G

First i would install webmin; Webmin

Then install ConfigServer Security & Firewall; ConfigServer Security & Firewall

Use Webmin to check the system logs and find the hackers ip address, then you can quick deny with ConfigServer Security & Firewall.

Port 80 is used for HTTP/apache, you`re not running a webserver so theres no need for this port to be open, close it.

Change SSH port 22 to something else less obvious to the hacker and open new port in ConfigServer Security & Firewall.

Setup a new FTP user and lock root access to the server.

If you need help with any of this let us know buddy.

Display More

Thanks a lot guys!! There is 1 think, he is using a nVPN, so it doesn't save any logs with his IP