David_spm

1. Community
2. Security
3. Unable to stop large xmlrpc spam attack

Update: I looked closer at some of the CloudFlare settings for some of the affected sites and tried adding the set of ips where all the requests were coming from. Nothing seemed to change. I then t...

• View comment
• David_spm
• July 25, 2018 08:23
• 0 votes

1. Community
2. Security
3. Persistent bot/brute-force attack, iptables not working

Currently CSF is not enabled. Ive left it like this since it crashed as it caused the entire server to go down which I dont want to happen again. This shows LFD killing php-fpm processes from thi...

• View comment
• David_spm
• June 20, 2018 12:45
• 0 votes

1. Community
2. Security
3. Persistent bot/brute-force attack, iptables not working

Thanks Lauren, I managed to get back into the server yesterday and this is where Im at now: I could see in Munin logs and graphs that everything went down around 6am EST, I couldnt see any major s...

• View comment
• David_spm
• June 16, 2018 10:54
• 0 votes

1. Community
2. Security
3. Persistent bot/brute-force attack, iptables not working

OK so unfortunately things got a lot worse later. After setting up CSF I also setup CloudFlare on a couple of sites, everything was fine and I checked in on the sever and some sites several times...

• View comment
• David_spm
• June 15, 2018 03:24
• 0 votes

1. Community
2. Security
3. Persistent bot/brute-force attack, iptables not working

You may want to consider installing CSF Firewall (it"s FREE!) - it makes blocking IP"s fast and easy. You can also configure it to automatically block IP"s based on Mod_security rule-hits. EDIT: s...

• View comment
• David_spm
• June 14, 2018 04:05
• 0 votes

1. Community
2. Security
3. Persistent bot/brute-force attack, iptables not working

thanks Its pretty rare blocking IP's does anything outside of maybe stopping the attack for a bit but to many infected hosts out there, you'll never block them all. You should check my previous po...

• View comment
• David_spm
• June 14, 2018 03:35
• 0 votes

1. Community
2. Security
3. Persistent bot/brute-force attack, iptables not working

Hi @David_spm That does sound like it would cause the issue you're presenting. Please let us know if the issue persists once you rectify the iptables configuration. Thanks! yes and no, Im gett...

• View comment
• David_spm
• June 14, 2018 02:45
• 0 votes

1. Community
2. Security
3. Persistent bot/brute-force attack, iptables not working

its back, and the same ip and targeting the same file on the same site, why cant it be blocked? edit: nevermind I think I know why now, In my iptables-config file I didnt have it set to use the sa...

• View comment
• David_spm
• June 13, 2018 07:49
• 0 votes

1. Community
2. Security
3. Persistent bot/brute-force attack, iptables not working

thanks for the detailed answer, not using CloudFlare. I just did a basic deny all rule to that php file in .htaccess, I will try your rule now. However I forgot to mention I installed mod_security ...

• View comment
• David_spm
• June 13, 2018 05:21
• 0 votes

1. Community
2. Security
3. Possible to install CSF via WHM GUI?

great, thank you

• View comment
• David_spm
• May 31, 2018 00:32
• 0 votes