Reputation
248
Top tag
Next privilege 250 Rep.
View close votes
Badges
3 10
Newest
 Constituent
Impact
~7k people reached

  • 0 posts edited
  • 0 helpful flags
  • 25 votes cast
Jul
15
comment What do “Unknown SSAP” and “Unknown DSAP” mean in tcpdump?
I could finally find and fix that ! see my answer !
Jul
15
answered What do “Unknown SSAP” and “Unknown DSAP” mean in tcpdump?
Mar
21
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 113 characters in body
Mar
17
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 302 characters in body
Mar
17
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 302 characters in body
Mar
17
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 196 characters in body
Mar
17
revised SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
added 197 characters in body
Mar
17
answered SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
Nov
29
comment Getting 408 errors on our logs with no request or user agent
in my understanding this will expose you to the slowloris attack, have a decent reqtimeout seems to be useful nowadays for anyone using apache
Nov
29
answered too many 408 error codes in access log
Nov
29
awarded  Constituent
Nov
25
comment Analyze logs after hack
you wont fint the hack from the logs in this pastebin... add ls -al /tmp /var/tmp /var/spool/cron/crontabs ; also is your server updated to the latest version of bash ?
Nov
25
comment Excessive number of sleeping processes in CentOS - howto diagnose?
you could be under a slowloris attack, check serverfault.com/questions/216212/how-can-i-detect-slowloris/…
Nov
25
comment What is eating my hdd on vps server after a few minutes?
or ls /var/spool/cron/crontabs/ , cat /var/spool/cron/crontabs
Nov
25
comment Analyze logs after hack
the log you post is just referer spamming, very common and most probably not related to the hack, you d have to pastebin much more logs if we are to help, also look for shellshock and see security.stackexchange.com/questions/16908/…
Nov
25
comment screen command process id
bot work here , screen -ls and screen -list
Nov
24
awarded  Organizer
Nov
24
revised Oops in syslog and freeze the server with docker
just adding tags
Nov
24
comment How to pinpoint why a specific ressource (image or library) slowing down page load
eh even " correctly configured professional grade" stuff have holes and backdoors nowadays
Nov
24
revised How to pinpoint why a specific ressource (image or library) slowing down page load
added 6 characters in body