The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
51 views

Malicious Resources on Linux Server?

When creating a website, I often include custom fonts (which I upload via FTP and reference via CSS). I get these font files from various locations on the web. I was wondering: is it possible for a ...
0
votes
1answer
68 views

How to detect malicious script in my CentOS server? [duplicate]

I am warned from my VPS provider that my server sends a lot of SSH SYN Attack to other servers, but I have no idea how to deal with it. Here's the detail my provider sent me: Where can I find the ...
0
votes
1answer
127 views

Almost all of our websites within our server is redirecting to a porno scammy sites [duplicate]

We are having a problem within our server. After transferring the files to a new dedicated server, within only one or two weeks almost every website under our server is redirecting to a porno scammy ...
-1
votes
2answers
156 views

Detect malicious script or reason creating lots of smtp connection [duplicate]

My VPS was suspended due to lots of SMTP connection(over 2000) per hour. But I am pretty sure none of my script was sending mail. I am using google apps and live service for mail. I have blocked my ...
0
votes
1answer
211 views

How protect from DDOS attack? [closed]

I have many requests with refferer like alexa.com google.com and etc. to main and couple another pages of site. Line from access.log 109.172.15.39 - - [11/Jan/2013:02:30:30 +0400] "GET ...
-1
votes
1answer
502 views

IIS 7 Serving all pages with an injected iframe [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY This is not a duplicate. The question above doesn't explain how that can be done. My VPS just got hacked an all my pages are being ...
0
votes
1answer
143 views

how to detect malicious activity from my server

I'm using a linode virtual server. My machine is Ubuntu 10.04. I got a ticket from Linode that they detected malicous activity coming from my server. "We have detected your system with an IP of, ...
0
votes
1answer
473 views

Critical Virus infection with PHP website. What are the options to remove Virus? [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY I have a critical virus infection to one of my website. There is a additional script found added at footer of few web pages . the ...
1
vote
1answer
549 views

Malicious script changing .htaccess files on server [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY There seems to be a malicious script accessing my server and editing the .htaccess files for all of my hosted sites to redirect ...
1
vote
3answers
264 views

Ssh log monitor

Are there any tools to monitor ssh logs at /var/log/secure and report activity? I am looking for some tools that will proactively tell me about user actions and highlight malicious activity. I don’t ...
-1
votes
2answers
338 views

how to find who is perform malicious activity in shared hosting server

I am a shared webhosting provider, I got a complain: * COMPLAINT * | *.*(server shared ip) | 2011-09-17 20:02:12 | jakarta.dreamhost.com | 1807770 | oscommerce remote upload from ...
-3
votes
1answer
76 views

Is there an up to date list of malicious IPs so that I can block them? [closed]

I'm looking for a comprehensive and up to date list of malicious IPs from all around the world so that I can block them in the servers I manage. I searched the net alot for it but I couldn't find ...
1
vote
3answers
338 views

What is this script that's been injected into our website?

This morning I discovered that a script has appeared in multiple locations on two of our websites. Needless to say I'm recovering the sites from backups, changing our passwords and trawling the FTP ...
1
vote
3answers
868 views

Is it worthwhile to block malicious crawlers via iptables?

I periodically check my server logs and I notice a lot of crawlers search for the location of phpmyadmin, zencart, roundcube, administrator sections and other sensitive data. Then there are also ...
0
votes
2answers
204 views

Domain points me to some malicious URL and I can't get rid of it

Whenever I enter my URL into the browser, it keeps pointing me to http://fornax.myvnc.com/dev The URL doesn't even work and my antivirus doesn't complain about it so I am not sure what is ...
0
votes
2answers
535 views

Malicious Script on LAMP Server

We have recently noticed that a malicious script is inserting itself in a number of PHP and HTML files on our domain questoons.com and the various add-on domains hosted on this account. The script ...
2
votes
3answers
240 views

Strange requests coming from Korean Site

Lately I've been finding a lot of strange requests like this coming to my rails app: Processing ApplicationController#index (for 189.30.242.61 at 2009-12-14 07:38:24) [GET] Parameters: ...
-3
votes
1answer
3k views

How to remove my site from blacklist of google chrome and mozilla

Hai guys, I removed all malicious code from my website pages and javascript files but still i cant view my site in firefox and google chrome.....
3
votes
5answers
473 views

php site defacing [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY someone is intruding in our site and putting following line in our main page (index.php):: In the following code bottom.php is our ...