Hacking is the violation of server or network security via exploitation of weaknesses in that security.

learn more… | top users | synonyms (1)

2
votes
3answers
157 views

mysql server - how can I restore a backup remotely (from the server itself ) without ssh access ? Hack my server

I created an instances on a cloud provider . Generated the .pem key to login through ssh. Installed mysql-server , downloaded the .sql backup on the server. removed the .sql backup from my local ...
1
vote
1answer
297 views

Blocking HTTP clients which request certain URLs repeatedly

I run a website on Windows Server 2008 R2. Looking through the IIS logs, I have noticed that there are some IP addresses repeatedly requesting certain URLs (such as for example ...
0
votes
1answer
37 views

Is it possible to mimic the client of a https web service

There is such a windows application that communications with the server through https protocol, it is an auction tool and works only several hours per month. I have captured network packets (by ...
0
votes
1answer
126 views

Securing the Django web site which is run with Apache mod_wsgi

I have made a website in Django 1.6 with PostgreSQL database which is hosted on Ubuntu 12.04.3 with Apache 2.2.22 and I have recently noticed lots of hacking (probing) attempts from various IPs ...
0
votes
1answer
390 views

Hidden Spam Meta Descriptions

I have found out that a client's site (WordPress CMS) was somehow infected with spam / hacked and did some serious cleaning, updating and upgrading and cleaning cache. I used various tools and search ...
0
votes
1answer
210 views

hiden iframe unescape

started helping a company with a web site a few days ago... i notices some strange code in some html and php files on the server: ...
1
vote
0answers
108 views

Is my site getting hacked (Bluehost)?

I'm running a simple website off of Bluehost, and I needed to use custom Python scripts so I created a cgi-bin folder in my site's directory and added my cgi python files there. Everytime I tried to ...
1
vote
0answers
100 views

suspicious connection on server

OS: Windows Server 2003 Monitoring tool: CurrPorts When monitoring traffic on the server for traffic going out on port 80, example of results: 5/1/2014 2:36:23 PM Added cscript.exe TCP ...
1
vote
0answers
118 views

How to secure tmp directory from hard link attacks when host doesn't allow partitioning

I'm a new sysadmin in the making, have learned that I need to have /tmp and /home directories on separate partitions in order to prevent possibilities of privilege escalation through hard links based ...
1
vote
0answers
462 views

Server getting constant DNS TXT queries - What is the hazard potential?

recently I discovered that my server was generating a lot more traffic than normal. Normally I get around 1-10 Mb per day, since the server only works as a host for eMail and static websites. ...
1
vote
0answers
24 views

What is ClixSmart+ServiceMonitor from my IIS log?

Our IIS6 log (W3SVC1) is showing entries with suffix ClixSmart+ServiceMonitor 200 0 0. There are over 10 of them per second and it lasts about 20 seconds when happened. Is our server being hacked? ...
0
votes
0answers
13 views

Syslogd acctack

My hosting company told me, my VPS server (CentOS release 6.6) have abnormal activities issue (hacking other server) and blocked my outgoing traffic, they just give me limit info: The hacking ...
0
votes
0answers
47 views

How do you get Snorby to generate an alert through a custom rule?

I am having trouble getting a rule to activate, when a syn flood attack is happening. I have tried 2 iterations of this code and I am losing my sanity over it. The scenario is that I have 3 VMware ...
0
votes
0answers
127 views

Auto black list hackers from Apache server that hit website too fast

I notice some hackers jumping from website to website iterating all possible IP addresses and hitting them so fast and hard with their attack URLs to get some flaws. I am more interested in how to ...
0
votes
0answers
122 views

Automatic IPSec IP Blacklist

A new client of ours has a legacy web app on Win Server 2008 R2 and when we started diagnosing the event logs, there were multiple ip's in China trying to hit both their sa sql account and trying to ...
-1
votes
0answers
19 views

Fail2Ban is not working for ssh

Iptable status:- ubuntu@ip-address:~$ sudo iptables -S -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -N fail2ban-ssh -A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh -A fail2ban-ssh -j ...