How to see historical root logins to a server
Command: last -F | grep root journalctl _COMM=sshd | grep root
Command: last -F | grep root journalctl _COMM=sshd | grep root
Symptoms At times websites might appears super busy, with 10s of gigs of bandwidth usage per month, but it doesn’t make sense. After viewing the
Symtoms Randomly, perhaps once or twice a month, Apache completely stops serving sites. No obvious errors, except web sites aren’t loading anymore. From HTTP monitoring
Step 1. Identify the bastard: netstat -an | grep ‘:443’ | grep ESTABLISHED | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq
Platforms: Outdated CentOS 7 Virtualmin Client suddenly added to 8 block lists visible on MX Toolbox. Server’s top shows many users of the same name.
Background Getting your IP address blacklisted as is not fun at all. A simple breach leads to discomfort a few hours, a more serious breach
Background Here are bare minimal instructions on how to set up a swap file for Debian (e.g. Ubuntu Linux) and Red Hat based operating systems
Symptoms At times websites might appears super busy, with 10s of gigs of bandwidth usage per month, but it doesn’t make sense. After viewing the
Command: last -F | grep root journalctl _COMM=sshd | grep root
Symtoms Randomly, perhaps once or twice a month, Apache completely stops serving sites. No obvious errors, except web sites aren’t loading anymore. From HTTP monitoring