10 ms·
The same thing happened to me last week: - Giant shared server full of old PHP projects* gets owned. - Logs show an automated tool was brute forcing a vulnera
by deckar01 11y ago
The same thing happened to me last week:
- Giant shared server full of old PHP projects* gets owned.
- Logs show an automated tool was brute forcing a vulnerable SQL injection vector for weeks before getting through.
- Backed up server for analysis and removed malicious content.
- Setup new ModSecurity rules, fail2ban, and fixed vulnerable code.
- Started moving stuff to Digital Ocean.
* Not my server or projects, but recently my responsibility.