Reputation
248
Top tag
Next privilege 250 Rep.
View close votes
Badges
3 10
Newest
 Constituent
Impact
~6k people reached

  • 0 posts edited
  • 0 helpful flags
  • 24 votes cast
Mar
21
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 113 characters in body
Mar
17
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 302 characters in body
Mar
17
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 302 characters in body
Mar
17
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 196 characters in body
Mar
17
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 197 characters in body
Mar
17
answered SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
Nov
29
comment Getting 408 errors on our logs with no request or user agent
in my understanding this will expose you to the slowloris attack, have a decent reqtimeout seems to be useful nowadays for anyone using apache
Nov
29
answered too many 408 error codes in access log
Nov
29
awarded  Constituent
Nov
25
comment Analyze logs after hack
you wont fint the hack from the logs in this pastebin... add ls -al /tmp /var/tmp /var/spool/cron/crontabs ; also is your server updated to the latest version of bash ?
Nov
25
comment Excessive number of sleeping processes in CentOS - howto diagnose?
you could be under a slowloris attack, check serverfault.com/questions/216212/how-can-i-detect-slowloris/…
Nov
25
comment What is eating my hdd on vps server after a few minutes?
or ls /var/spool/cron/crontabs/ , cat /var/spool/cron/crontabs
Nov
25
comment Analyze logs after hack
the log you post is just referer spamming, very common and most probably not related to the hack, you d have to pastebin much more logs if we are to help, also look for shellshock and see security.stackexchange.com/questions/16908/…
Nov
25
comment screen command process id
bot work here , screen -ls and screen -list
Nov
24
awarded  Organizer
Nov
24
revised Oops in syslog and freeze the server with docker
just adding tags
Nov
24
comment How to pinpoint why a specific ressource (image or library) slowing down page load
eh even " correctly configured professional grade" stuff have holes and backdoors nowadays
Nov
24
revised How to pinpoint why a specific ressource (image or library) slowing down page load
added 6 characters in body
Nov
24
comment How to pinpoint why a specific ressource (image or library) slowing down page load
also dont believe everything is secure as a default, theres probably a hole somewhere in your firewall or router that allows 770 more GBs to be uploaded.
Nov
24
comment How to pinpoint why a specific ressource (image or library) slowing down page load
use nmap ;) find the additional 770 gb .but only 30 gb monthly upload for 15-30 users . . . i can hardly believe this number.