Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it’s on-topic for Server Fault. Closed 5 years ago. Improve this question I’ve just done a routine reverse IP check. And saw that 2 domains are pointing to my IP. This is getting me really … Read more
Since hosting providers are constantly under attack from hackers, encryption of the entire file system (the entire server) with tools like www.truecrypt.org seems like an absolute must to me, if you care about your users. Now, attacks are becoming more sophisticated and hosters should, by default, never be trusted. It is my understanding that system-wide … Read more
My servers get attacks from thousands of ip addresses everyday. I have an idea. Can I report those malicious ip addresses, or use the resource to earn some money? How? You may think these attacks are common on the Internet. But the attacks to my servers are kind of special. They come from thousands of … Read more
I recently started running a personal site on a dedicated server that i’ve had for some time, but have never actually used. I have never checked it’s logs, but now when i do, auth.log is full with random ssh connection attempts from Chinese, Russian, Ukrainian, Azerbeijanian and etc. IPs. I got curious and checked the … Read more
This question already has answers here: How do I deal with a compromised server? (13 answers) Closed 6 years ago. I have dedicated server for my personal projects on Hetzner and today was the second time I got email from them informing that they detected portscan coming from server (first time was in January). At … Read more
This question already has answers here: How do I prevent Apache from answering requests for domains I don’t host? (3 answers) Closed 8 years ago. Today I found one of my website fully being displayed at another domain that is not mine. Is this some kind of DNS hack or what is the purpose of … Read more
Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it’s on-topic for Server Fault. Closed 7 years ago. Improve this question I want to audit a web application which is hosted on a web server sitting behind a cyberoam firewall. My task is to … Read more
My webserver got blocked by my provider recently for the reason that it was performing an attack to another server. The email contained the following log: 08:26:39.219940 68:05:ca:07:02:01 > 78:fe:3d:46:e8:a5, ethertype IPv4 (0x0800), length 1057: 5.9.97.70.46156 > 180.97.163.74.80: UDP, length 1015 08:26:39.221584 68:05:ca:07:02:01 > 78:fe:3d:46:e8:a5, ethertype IPv4 (0x0800), length 1061: 5.9.97.70.55018 > 180.97.163.74.80: UDP, length … Read more
Our site is smashed by Google bot and Facebook: 66.249.90.50 – – [03/Apr/2017:09:26:41 +1000] “GET /news/?vmowv= HTTP/1.1” 200 48925 “-” “Mediapartners-Google” 66.249.90.49 – – [03/Apr/2017:09:26:42 +1000] “GET /news/?dmsdv= HTTP/1.1” 200 48920 “-” “Mediapartners-Google” 66.249.90.51 – – [03/Apr/2017:09:26:55 +1000] “GET /news/?gnqho= HTTP/1.1” 200 48921 “-” “Mediapartners-Google” or 66.220.145.244 – – [03/Apr/2017:09:24:32 +1000] “GET /news/?fcyaz= HTTP/1.1” 200 … Read more
Do requests like these look like a DDOS attack ? 180.157.250.126 /9301451791bb460e8a5aec3e123884ba.jpg <<< match 180.157.250.126 /b29a2302afd6dfd918a2b7c3b6a05e31.jpg <<< match 183.199.78.159 /img/6445ae665386ca14406c1d8614d44b36.jpg <<< match 183.199.78.159 /d05e8990820ca4c62da2c02154bf7573.jpg <<< match 218.199.166.231 /cover/20190408/EdhmxRHDT_cover.jpg 120.84.247.19 /2019/04/08/707fc44cfdd64db9a98fb258a9156fd1.png <<< match 120.229.106.161 /dba2213c45576d6392a48a6d36c44af7.jpg <<< match 14.127.121.215 /cover/20190408/bTr7qsknE_cover.jpg 117.157.137.137 /cover/20190409/m1uqOsrjN_cover.jpg 117.157.137.137 /cover/20190409/gAF2uRaiJ_cover.jpg 171.223.171.152 /5bd3a6215e39050e07eb6411ef08e3b1.jpg <<< match 220.164.38.69 /6da51bd2d2dcb4abd32803d02ad4c008.jpg <<< match I am blocking them automatically … Read more
