RimuHosting Blog

Tag: Security

  • Identifying exploits and exploited websites

    I have made posts before regarding how to find exploits, and what to do about those previously, however it has come to my attention that some people are not even realizing what the basics are to look for. In this post i will give you ideas on what to look for, how to identify exploits…

  • DNS amplification DoS attacks

    If you are running a DNS server, then you need to check it is not being co-opted into ‘DNS amplification attacks’. Random nasty servers (typically part of virus created bot-nets) send your DNS server a short request but use a fake source IP address.  Your DNS server then sends a (typically) long reply back to…

  • Finding Exploits and Trojan php hacks on a website

    Its always unfortunate when you are exploited, and the best method to fix a site is to wipe and restore from a known backup as well as track down the entry point they gained access and fix it. Sometimes you need to ‘clean’ a site of these files before migrating things over however , or…

  • Blocking malicious crawlers or scrapers in Apache

    Occasionally we see a customer who has a popular website that often gets people trying to crawl it and copy the lot, This has the unfortunate side effect that its hammering the site. Made worse only by dynamic pages and loops this can literally take down a server in some occasions. Often you can slow…

  • Finding spam sending PHP scripts on your server

    Everyone has the occasional user who may leave something on their server that may send spam, or not update things as fast as they should. Tracking down the spammer can be a real problem though. Sometimes you can track down the domain, but not the script, other times they may have so many files that…

  • SSH keys on new servers

    You can now set your public ssh key(s) at http://rimuhosting.com/cp/sshkeys.jsp .  These keys will automatically be added to new server setups.  And the keys can be used when you enable a server’s console-over-vps feature. SSH keys are great when you want to avoid re-entering passwords every time you log into a server.  The Ubuntu team…

  • Ubuntu 12.04 LTS Precise Pangolin

    We are delighted to offer the latest release of Ubuntu Server, codenamed Precise Pangolin. That is available as an reinstall option or for order on all our VPS and dedicated server ordering pages.

  • Keeping your hosting panel updated

    From time to time hosting control panels (Such as Plesk) get updated by their creators. Those updates may often include patches to critical vulnerabilities, so its a good idea to keep track of those. We try to keep our customers informed. One example is a recent notification from Parallels affecting some older versions of Plesk.…

  • JBoss AS 7.1 install script

    JBoss Application Server (or JBoss AS) is an open-source Java EE-based application server. It has been optimized for multiples cores, it has a very fast startup time and a great low memory consumption. We have created a new version of the jboss install script. Jboss 7 changed a lot the way it is configured, that…

  • Account authorization and password resets

    The primary way we identify our customers is via the email addresses associated with your account. If you do not communicate with us using one of these listed accounts, it may delay or slow the work we do on your server until we can verify you are authorized to request work done on the server.…