How to see historical root logins to a server
1 June 2025
2:49 pm
Command: last -F | grep root journalctl _COMM=sshd | grep root
Knowledgebase
Amazonbot and Bingbot excessively crawls websites, query parameters, and shop filters
1 June 2025
12:31 pm
Symptoms At time websites might appears super busy, with 10s of gigs of bandwidth usage per month, but it doesn’t make sense. After viewing the
Apache on WHM/cPanel randomly stops working – intermittently – possible PHP-FPM issue
1 June 2025
12:18 pm
Symtoms Randomly, perhaps once or twice a month, Apache completely stops serving sites. No obvious errors, except web sites aren’t loading anymore. From HTTP monitoring
The quickest way to find brute force attackers on a server using Netstat
30 May 2025
11:20 am
Step 1. Identify the bastard: netstat -an | grep ‘:443’ | grep ESTABLISHED | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq
How to recognise and outbound attackers and a website compromise
23 May 2025
11:28 am
Platforms: Outdated CentOS 7 Virtualmin Client suddenly added to 8 block lists visible on MX Toolbox. Server’s top shows many users of the same name.
How to see historical root logins to a server
1 June 2025
Command: last -F | grep root journalctl _COMM=sshd | grep root
Amazonbot and Bingbot excessively crawls websites, query parameters, and shop filters
1 June 2025
Symptoms At time websites might appears super busy, with 10s of gigs of bandwidth usage per month, but it doesn’t make sense. After viewing the
Apache on WHM/cPanel randomly stops working – intermittently – possible PHP-FPM issue
1 June 2025
Symtoms Randomly, perhaps once or twice a month, Apache completely stops serving sites. No obvious errors, except web sites aren’t loading anymore. From HTTP monitoring
The quickest way to find brute force attackers on a server using Netstat
30 May 2025
Step 1. Identify the bastard: netstat -an | grep ‘:443’ | grep ESTABLISHED | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq
KernelCare Broken Warnings and Looping about Free Symlink Protection on WHM/cPanel servers
27 May 2025
On a cPanel server you may see this warning: You’ll notice the link “Add KernelCare’s Free Symlink Protection” but clicking it bring up either a