I can see lot of MSSQL Server attacks. In event viewer "Login failed for user 'sa'. [CLIENT: Some IP]"
Most of the attack coming from Chaina. Tipically what I'm doing manually is get that entire IP range and block from Windows Firewall level.
Now I have plenty of blocked IP ranges all over the world.
What would be the best way to avoid from those kind of attacks ?
I see on one server with windows 2k3 and sql 2000 alot of Injection attemts(lucky so far) and 90% come from china.
Is there any way on iis6 to put range ban like 123.52.0.0 - 123.55.255.255 so to ban all that network?
I already have MSSQL 2005 on my server, one my the client requested us to install MSSQL express and they want to use the FOC version.
Can I run MSSQL server + MSSQL server express concurrently? Anybody can give me guidelines how to install it?
Do I need to uninstall MSSQL or it would be as easy as installing MSSQL express on top of MSSQL server.
there are some game types out there that are not protected from any type of udp flood attack. I have been doing a lot of work (my servers are linux) and blocked this by coding a bash script running every second checking tcpdump for the amount of current UDP connections and blocks the ip witch has more than a certain number of current UDP connections. This works perfeclty, but it firewalls the ip AFTER the attack started.
I am really interested into blocking this attack fully. Limiting the number of current connections (UDP) from an ip to a certain amount to block this attack totally. I have been looking around a lot and have had no luck. From what I have found, there is no way to do this with iptables or ipchains. It is possible for TCP though, but I could not find it for UDP. Could anyone help me out here.
Just to let you know, I do run a firewall, but it would never pick up this type of attack unless it was major. This is more like a game type bug (firewall thinks the packets are fine, player packets going to the game server).
I have MSSQL 2005 running on the W2k server, can i install SQL Server Express on top of it w/o causing any disruption to other services including MSSQL.
View 2 Replies View RelatedI have a cPanel dedicated server and have a lot of spam attacks on this server. It's getting so bad that our IP is being added to Yahoo & AOL blacklists and my emails are bouncing to these accounts.
Is there anyone on here who can do a thourough check on our server and install anything necessary to stop this kind of activity?
i am getting hundreds of theses in my mail log each day, trying different names etc and want to put a stop to them and auto ban the ips.
I have APF
I have few scripts, but hackers again upload at some way c99, and hack some SMF forums at server. Server like server they cannot hack, but user account they can. So please tell me what you advice?
View 6 Replies View Relatedasp.net 2.0 + mssql server 2005 + ajaxtoolkit support
I need windows hosting with asp.net 2.0 + mssql server 2005 + ajaxtoolkit support for a website project that is being developed. It can probably be launched on shared hosting, but I would prefer at least a VPS. With any success this site would eventually need to be hosted on a dedicated server.
I have been offered a 1U Dell server for free with Windows Server 2003, Dual Xenon Processors, 2 GB ram and 2 x 80gb hard drives. It would probably serve the site well for a long time, but I would need to set it up (or get it setup $) for the above requirements and get it colocated somewhere. BTW, I'm not too familiar with Windows hosting.
To launch the site, I don't really want to spend more than $100 per month. And I'd prefer to stay in the $50 per month range if possible.
Open to any and all suggestions, comments, questions at this point? I've searched and see a lot of suggestions for shared hosting, but I'd really like your opinions on colocating the dedicated server.
one of my servers currently died (it was a 1u System) Dual Xeon, 3GB RAM. I need the DATA off my SCSI harddrives.. i have a 2U system only, but when i try and put the SCSI harddrive into the Machine, windows crashes on the "Windows 2003 " starting screen. Windows, ugh, horrible. I need to get into windows to get my MSSQL database's backed up and then moved to a new server.
View 11 Replies View RelatedI have an account which used a remote MSSQL server which I have since deactivated, but before deactivating I forgot to remove the DB and Server from plesk.
So now I can't remove the remote MSSQL server from plesk as there is a DB associated with it, and I can't remove the DB because it obviously can't find the remote server! I'm now stuck in a loop!
How I can force remove the DB/User from plesk and then the remote server ? I'm now receiving errors whilst backing up the account, so needs to be done.
I have Plesk 12 on Windows Server 2012 and SQL 2014 Express, and I am unable to add the SQL server to Plesk. It looks like it is waiting for a long time for something, then I get this error:
Get database server version failed: mssqlmng failed: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied. (Error code 1)Click to expand...
When using a remote MSSQL server, the Webadmin link fails to load in a redirect loop.
Is there any way to change this link or disable it?
How I can secure my server from vulnerabilities and threats and ddos attack? How can I find my server is compromised or hacked?
Which ports I should check, what commands I should fired on shell prompt? which softwares you will recommend.
How do I get MSSQL Server and MySQL working on the same server?
I have MySQL running but in PHP.INI when I uncomment the extension=php_mssql.dll line MySQL stops working.
Why is this?
I'm trying to upload backup ms sql server file. But the Control panel tells me error: "Error: copy_file failed: filemng cp failed:"
View 4 Replies View RelatedI`ve just got a new Windows 2003 Web Edition box and now I`m going to install a database server on that.
MSSQL 2005 license would costs 270$/mo for me, So thats not possible to use it because of its price.
I`m not sure if MSSQL Express 2005 or MSDE (which are free) can handle all requirements of ASP.NET programmers or not.
Is there any limitations for major scripts on those? or will those make any doubts for programmers?
Please share your experiences and suggestions.
* I`m going to install "Hosting Controller" on that box.
I'm getting DoS attacks on my new dedicated server and I've had about 600 emails from my server about IP bannings. I can't even access my server via WHM at all at the moment! The sites are still online and the server is up but I can't log into WHM. What can I do to remedy this?
Also I can't quite understand why anyone would conduct a DoS attack in the first place...
I am planning on starting a new project and am curious as to if there would be an issue with hosting the websites (IIS) and the MSSQL Databases on the same server?
Basically housing all of the websites and SQL DBs on the same server?
Is this going to cause major problems? I originally thought that I should house the DBs separate but am starting to think that we can house the web and dbs on the same machine but I wanted to get some advice from other that know more about Windows then I.
I have a VPS that's on the awknet network and I'm receiving DNS DDoS and I don't think they have anything to stop these attacks, how can I prevent these?
View 4 Replies View RelatedI seem to be getting a lot of mail attacks to accounts located on the server. However, most of the email addresses do not exist and therefore the emails are bouncing back and getting stuck in my mail queue manager. There are something like 20 emails per minute getting stacked up in there and it is causing a massive load on the server.
How can I stop these attacks?
my webserver defaced with this persons name all over my site.
I was reading and it said JaMaYcKa does this things through a cPanel bug.
Apparently our entire host has been hacked too. I'm very dissapointed as I was on the verge of starting one of my most biggest projects and now it's gone. :'(
what level of hardware/hosting plan I need for one of my clients.
Current stats:
~65 ecommerce orders per week
~5000 unique visitors per day
Requirements:
Win2k3
ASP.NET 3.5
MSSQL 2005
My first recommendation to them was RackSpace due their good reputation, but they were not able to pay for the plan suggested to them by RackSpace.
My other question is what type of plan do you guys recommend based on the above stats/requirements (managed/VPS/dedicated/etc.)? VPS is what came to mind for me since we'll probably end up using this setup for more than one website/domain and since they are so price sensitive.
I'm fairly comfortable setting up and administering Win2k3 and MSSQL. I'm sure that plays into the choices a little.
I know there is probably some information I have left out that would help you guys make a recommendation. Please just let me know what else would help.
I have around 5 servers each running an instance of MSSQL. Four of them hold small databases (largest is 4GB) and all fairly active (I was monitoring the largest for around a minute with SQL Profiler and it used about 2000 rows).
The largest server is used as a central database for logs for the above four servers.
This server runs across 4 * 15k drives in RAID10, but the RAM is a huge bottleneck (64bit OS, 32bit MSSQL). I also watched this server for around a minute in SQL Profiler and saw around 2000 rows being used again.
Now I'm looking to centralise everything into a single instance of MSSQL. I can't afford for MSSQL to be slow, but it will be housing 7 databases (3 'main' databases, 3 log databases, 1 misc. database).
I'm looking at this:
- 2 * Quad Core Xeon 5405 - 2.00GHz (Harpertown)
- 12GB RAM
- 250GB SATAII - Windows installation / Programs
- 250GB SATAII - Backup drive, MSSQL transaction logs
- 10 * 73GB SA-SCSI 10k (RAID10) - MSSQL instance, all databases here
I'm just wondering if anyone could hazard a guess if this would be sufficient? I've tried to explain things the best I can. I guess to summarise would be that there are a lot of read and writes that would happen if I conbined all the databases into a single instance.
I see that SQL Server Express said to be free but does that mean its free for commercial use? personal use? development use? I don't see any information.
Also I read on this board that some hosts offer this. Are they just using the free free version or something else?
what is the best way to connect to a MSSQL from a Centos box?
View 2 Replies View Relatedone of my costumers server is getting ddos attacks. I solved syn and get attacks with litespeed web server but I have another problem. They started to do udp flood. I m losing connection to my server. I bought new server with 1 gbit port for solving it.
View 3 Replies View RelatedThis is a quote from an unrelated thread in the Dedicated Server Forum, I didnt want to hijack the thread so thought I would bring my question over here:
Quote:
Originally Posted by HRDev Hady
I believe they use BurstNet, which isn't really a good choice for DDoS-prone sites as their Top Layer devices don't seem to handle attacks very well in my opinion. If you're running a DDoS prone site, you'd likely be better off with a DDoS-specialized provider such as Awknet, Staminus, or Black Lotus. But as mentioned, a lot of attacks can be stopped simply by proper tuning of your IP stack and some simple firewall rules.
My question is as a new Dedicated Server Owner what tuning and rules do I need to implement in order to protect me from these "small scale DDoS Attacks"?
I do not run a DDoS prone site(i hope not lol) but I want to secure myself as much as possible and have a headache free run other than the headaches I cause myself of course.
Recently, i hosted my domain with two different servers. but both of them were attacked by malwares and viruses. Google also started showing warning like "This site may harm your computer".
Now i can't open my site on firefox (it gives security warning)... when i open in explorer , my index page is totally changed.
Is there a solution for that? Which linux server will be best to protect my site from malware attacks.
I want to understand the mechanics of a DDOS attack. I have been doing a lot of reading about them this weekend.
The way I am understanding it, a DDOS attack is done at the network level. It may be requesting that pages from a given website, or websites, are served up, but it basically will effect the entire network. So if 'page display' requests are made to a website(s) that is hosted at ABC Hosting (example only), to the tune of 15GBs then I have to assume that the network will be terribly degraded. If that is so, wouldn't other servers also get taken out?
I believe the architecture of the internet is something like this (example only):
Gnax --> Planet, SoftLayer, RackSpace, etc.. --> Reseller --> Smaller Reseller --> Me
If that is true, is each level along that route using their own networking system or are they all dependent on ones that major Data Center uses?
My current site has been taken offline since it was being ddos attacked, been with my current hosters for 3years at least, but with recent events they gave me the option to shift my site to a dedicated server or me to move of bascially. (impression I get now, since they seem to be taking longer to reply to my messages) I was being ddos attacked since I refused to give a copy of me software to the visitor at my forums/site.
ive been looking round site after site and I cant make up my mind who to shift too, also if that same idiot who ddos attacked me does it again before I can take any action, I would be in the same situation again.
I have multiple domains and all my sites in total are about 5gig in size, cpu usage is avergae and queries roughly about 15/17 the most, I currently pay £130.00 a yr
I have had few bad experiences with hosting companies but learnt along the way, and assumed my current hosters would be a reliable place to stay at. My sites been offline since friday and I would like to get it back up again asap. Last thing I want to do is rush into a hosting package and be stuck in a dud situation.
I would also like to take action upon the person who has been ddos attacking me, I managed to get hold of his details and I also have confirmation that they are correct, what can be done legally?