Search the Knowledgebase |
Browse by Category |
|
|
|
View Articles by Category |
|
There are no sub categories
|
Abuse
|
There were 11 articles found in this category:
What is a DMCA and how do I file one?
The Digital Millennium Copyright Act (DMCA) is a United States copyright law that implements two 1996 treaties of the World Intellectual Property Organization (WIPO). It criminalizes production and dissemination of technology, devices, or services intended to circumvent measures (commonly known ...
What is Spam?
Spam is defined many different ways, but the official “legal” definition of spam is: “E-mail spam, also known as junk e-mail, is a subset of spam that involves nearly identical messages sent to numerous recipients by e-mail. A common synonym for spam is unsolicited bulk e-mai ...
My server has been blocked by Abuse. What do I do?
Generally the abuse department will not block your server unless one of the following conditions has been met: 1) Disregarded ticket 2) Failure to resolve ticket even though you have acknowledged the ticket 3) We are required by law to block it (IE: child exploitation or terrorist content) 4) Re ...
What does MALWARE mean?
For the Wikipedia definition of Malware, please see http://en.wikipedia.org/wiki/Malware Malware is code designed to exploit and infect the person visiting a website. Generally speaking this is accomplished by either compromised FTP accounts or via exploited code on your website (SQL injections ...
URL injections information
URL Injection attacks typically mean the server for which the IP address of the attacker is bound is a compromised server. Please check the server behind the IP address above for suspicious files in /tmp, /var/tmp, /dev/shm, along with checking the process tree (ps -efl or ps -auwx). You may al ...
Rootkit help
RootKit -- Spyware and Junkware detection and removal tool Go to Rootkit Hunter homepage, and download the latest release. http://www.rootkit.nl/projects/rootkit_hunter.html ## Get the latest source and untar # cd /usr/src/utils # wget http://downloads.rootkit.nl/rkhunter-<version>.tar.g ...
Ddos protection with bandwith shaping
Protecting your host from SYN floods From Alexey's iproute documentation, adapted to netfilter and with more plausible paths. If you use this, take care to adjust the numbers to reasonable values for your system. If you want to protect an entire network, skip this script, which is best suited f ...
Chrootkit help
SSH as admin to your server. DO NOT use telnet, it should be disabled anyways. #Change to root su - #Type the following wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz # Check the MD5 SUM of the download for security: ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.md5 md5sum chkroo ...
Brute Force Detection
BFD -- Brute Force Detection BFD is a shell script which parses security logs and detects authentication failures. It is a brute force implementation without much complexity, and it works in conjunction with a APF (Advanced Policy-based Firewall). ## Get the latest source and untar. # cd /usr ...
Botware / Malware defense
Prevention ========= - Ensure OS and software patches on the desktop are up to date - Disallow installation of new software on desktop (users have no administrative rights) - Block domains that are known to be distributing malware. - Malware domains http://www.malwaredomains.com - C&C l ...
DoS: looking at open connections
Here is a command line to run on your server if you think your server is under attack. It prints our a list of open connections to your server and sorts them by ammount. RedHat: netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n BSD: netstat -na |awk '{print $5}' |cut -d ...
|