Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Server has been compromised
Special Forums Cybersecurity Server has been compromised Post 302756727 by Neo on Wednesday 16th of January 2013 12:13:46 PM
Old 01-16-2013
I think it is more important to determine what are your key apps on the server; then back them up if you think they are not compromised and rebuild the VPS server from scratch; and reinstall your app.

You should also make sure your file system is secure based on the apps that are running, and run a cryptographic file system management tool (tripwire or some other version of the same thing) immediately to get a baseline.

What you have failed to mention is the core production app that is running on the server. Is it a web server? A mail server? A database back end?

It is really not possible to help you if you are not specific about what is "core app" and what is "supporting files". The reason is that you need to rebuild your file system from scratch to be perfectly safe. However, there may be some files you need (database, web files) that are not compromised and you can just back them up, reinstall the system (the supporting file system) and then get the main act up and running.

But the exact strategy is based on what is the main core application running on the server.

Is is basically a web server?
 

9 More Discussions You Might Find Interesting

1. IP Networking

in.telnetd[5115] -- compromised?

/* Linux Slackware */ looking in my logs I see tons of entries similar to below. Does anyone know what these mean, and should I be concerned. I looked up a few of the IP's at Arin.net and saw that many of them belong to isp's (not good).. Any information is helpful.. Body of Messages log... (1 Reply)
Discussion started by: LowOrderBit
1 Replies

2. Solaris

NFS write failed for server.....error 11 (RPC: Server can't decode arguments)

Hello! I have a Linux nfs server (called server100 below) with a export nfs. My problem is that the Solaris client (called client100 below) doesn't seems to like it. In the Solaris syslog I got following messages (and after a while the solaris client behave liked its hanged/to buzy). Also see... (3 Replies)
Discussion started by: sap4ever
3 Replies

3. Windows & DOS: Issues & Discussions

Office server => laptop =>client server ...a lengthy and laborious ftp procedure

Hi All, I need your expertise in finding a way to solve my problem.Please excuse if this is not the right forum to ask this question and guide me to the correct forum,if possible. I am a DBA and on a daily basis i have to ftp huge dump files from my company server to my laptop and then... (3 Replies)
Discussion started by: kunwar
3 Replies

4. Shell Programming and Scripting

KSH fetching files from server A onto server B and putting on server C

Dear Friends, Sorry for this basic request. But I just started learning Ksh recently and still I am a newbie in this field. Q: I have files on one server and the date format is 20121001000009_224625.in which has year (yyyy) month (mm) and date (dd). I have these files on server A. The task... (8 Replies)
Discussion started by: BrownBob
8 Replies

5. Shell Programming and Scripting

Connect to server-1 from server-2 and get a file from server-1

I need to connect to a ftp server-1 from linux server-2 and copy/get a file from server-1 which follows a name pattern of FILENAME* (located on the root directory) and copy on a directory on server-2. Later, I have to use this file for ETL loading... For this I tried using as below /usr/bin/ftp... (8 Replies)
Discussion started by: dhruuv369
8 Replies

6. Shell Programming and Scripting

Shell script to copy a file from one server to anther server and execute the binary

Hi , Is there any script to copy a files (weblogic bianary + silent.xml ) from one server (linux) to another servers and then execute the copy file. We want to copy a file on multiple servers and run the installation. Thanks (1 Reply)
Discussion started by: Nawrajesh
1 Replies

7. UNIX for Dummies Questions & Answers

Transfer file from server B to server C and running the script on server A

I have 3 servers A, B, C and server B is having some files in /u01/soa/ directory, these files i want to copy to server C, and i want to run the script from server A. Script(Server A) --> Files at Server B (Source server) --> Copy the files to Server C(Target Server). We dont have RSA key... (4 Replies)
Discussion started by: kiran_j
4 Replies

8. Solaris

Script to get files from remote server to local server through sftp without prompting for password

Hi, I am trying to automate the process of fetching files from remote server to local server through sftp. I have the username and password for the remote solaris server. But I need to give password manually everytime i run the script. Can anyone help me in automating the script such that it... (3 Replies)
Discussion started by: ssk250
3 Replies

9. UNIX for Dummies Questions & Answers

Please help my computer has been compromised

Hi everyone, I hope I am posting in the right spot and I really need some help. I am going through a horrible divorce and I am afraid that my husband has compromised . He set up my mac computer and router and for my job set up remote access for me. I caught him cheating on me and I think he... (6 Replies)
Discussion started by: kk243665
6 Replies

LEARN ABOUT DEBIAN

svnweb-server

SVNWEB-SERVER(1p)					User Contributed Perl Documentation					 SVNWEB-SERVER(1p)

NAME

       svnweb-server - simple webserver for SVN::Web

SYNOPSIS

	 svnweb-server [--root DIR] [--port PORT] [--net-server Net::Server]

DESCRIPTION

       svnweb-server is a webserver that runs SVN::Web.  It's an easy way to use SVN::Web without having to set up Apache (or any other web
       server).  The tradeoff is that the server is very simple.  But for light use then it may be perfectly acceptable.

OPTIONS

       --root DIR
	   The directory in which you ran "svnweb-install".

	   Optional, defaults to ".".

       --port PORT
	   The port the server should listen on.

	   Options, defaults to 8080.

       --net-server Net::Server
	   The Net::Server subclass to use to create the server.  A single, non-forking server is created by default.  Other types of server can
	   be created by giving the correct Net::Server subclass.  For example, to use a server that forks to handle each request, use
	   "--net-server Net::Server::Fork".

SEE ALSO

       SVN::Web

BUGS

       This is a simple server.  Accordingly, a few features do not work properly at the moment.

       Redirects
	   SVN::Web::Browse will redirect the client if the URL is missing a trailing "/".  That redirection does not work with this server.
	   That's not an issue for any URLs generated by SVN::Web, but may be an issue for URLs that are entered by hand.

	   This will also affect SVN::Web::List's "redirect_to_browse_when_one_repo" option.

       cgi_class
	   The "cgi_class" declaration (if any) in config.yaml is ignored.  CGI is always used as the CGI class.

       Please report any bugs or feature requests to "bug-svn-web@rt.cpan.org", or through the web interface at
       http://rt.cpan.org/NoAuth/ReportBug.html?Queue=SVN-Web <http://rt.cpan.org/NoAuth/ReportBug.html?Queue=SVN-Web>.  I will be notified, and
       then you'll automatically be notified of progress on your bug as I make changes.

AUTHOR

       The current maintainer is Nik Clayton, <nikc@cpan.org>.

COPYRIGHT AND LICENSE

       Copyright 2006-2007 Nik Clayton.  All Rights Reserved.

perl v5.14.2							    2012-06-11							 SVNWEB-SERVER(1p)
All times are GMT -4. The time now is 12:24 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy