Step 1. Check Active Logins. If a bad actor has hacked your server, they might still be signed in. The easiest way to check if this is the case is to connect to your Linux server via SSH and run: w.

In this how-to guide, we'll cover some basic commands for discovering usernames, user IDs, and more. It's not just about who's who but understanding what's going on behind the scenes in your Linux ...

The output of the above command will list out each IP address that is connected to the server and how many instances from each. As you can see, I have two IP addresses connecting to my server (one ...