Those of you responsible running commercial websites

[diseasex]

Somebody exploited an ntp hole on the aLom on my colo'd box, turned out I was the relay of a fair amount of havoc!

I think if they target you , there's nothing you can do . If they see they can milk you , or you upset them enough (visa, Sony etc)
Hasn't happened to me though

[stek]

I think if they target you , there's nothing you can do . If they see they can milk you , or you upset them enough (visa, Sony etc)
Hasn't happened to me though

Just a port scanner found an unpatched hole - and Ddos'd from it, fixed a sec as soon as they told me.

[stek]

I have no idea what you just wrote.

ntp = Network Time Protocol

aLom = Advanced Lights Out Management (i.e. remote access/power card running Linux Busybox)

Colo = Colocation - my box, their DC.

Simples!

[zazou]

Thanks chaps.

The system runs on Azure Web Sites (PaaS) so less worries about ports, security updates etc.

[Contreras]

Check your server authlog and be amazed at the number of bots on Chinese IP's trying to guess the root password......

Which is why I run sshd on a non-standard port, as well as use group permissions to restrict logins. It still gets attacked, but then fail2ban adds their IP to the firewall.

[stek]

Which is why I run sshd on a non-standard port, as well as use group permissions to restrict logins. It still gets attacked, but then fail2ban adds their IP to the firewall.

Me too...

[silverlight1]

If you are running a Wordpress site always make sure you have the Sucuri plugin and iThemes Security (formerly Better WP Security) plugins

This allows you to block most automated bots from trying to hack sites