Strange Browser Agent
May 10, 2009i recently got multiple logs regarding this weird browser user agent,
Browser Agent:
XXX<? echo "w0000t"; ?>XXX
anyone have information regarding this?
i recently got multiple logs regarding this weird browser user agent,
Browser Agent:
XXX<? echo "w0000t"; ?>XXX
anyone have information regarding this?
There's a bot that's taken to trolling my site. I'd like to block it.
1) Is there a relatively straightforward way through cPanel that I can do this?
2) Failing that, via adding some code to a page on my site (I've seen some code when googling on the 'net, but I'm new to this, and don't even know where such code belongs. As far as I can tell, depending on the bot, sometimes severe measures may need to be taken. However, from my limited reading, it seems that appropriate editing of .htaccess might do it.)
My dedi host, was having all sorts of problems with simply just setting up a box, taking them roughly a week, and I'm still waiting for a resolution.
Anyhow,
Windows validation failed, I contacted them to open up a ticket, They wanted the password to root because I've changed the default password they gave me, so I gave them the password
(1)Should I not be doing this, or do you have to give them the password when they ask.
(2)Can this have been resolved without giving them password to root.
They said it'd be resolved in an hour, I emailed them back and they said they'll email me when it's done. But they've closed off the ticket.
(3)Issue hasn't been resolved, how's anyone going to be working on it if the ticket is closed? Shouldn't that ticket be left open till the issue is resolved?
Wow I'm so green behind the ears with all this stuff.
I'm trying to deny from the block of "192.168.1" without much success. Could someone around here divulge the error of my ways?
Here is the exact code I have in my .htaccess file:
Code:
AuthName "Test"
AuthType Basic
<Limit GET POST>
order deny,allow
deny from all
allow from 192.168.1.
</Limit>
I have a SSG-320M I manage, and would like to know if I can block traffic to our web servers based on the user agent hitting us? I know user agents that keep using more and more IP addresses to crawl us, one already taking up some 30 or 40 addresses under my policies and its a pain to identify these by hand and keep updating the firewall every few days to add new IP addresses for them. Is there somewhere I can add part of the user agent I do not want to ever see again? Right now I do this by having a policy at the top saying "BadBotsGroup" is denied. But I want to deny anyone with a user agent "OneUserAgent" or "SecondUserAgent"
It seems so important and simple, but I do not see anything about being able to do this. Thanks for help and pointers. Right now we have special code at the top of our sites that blocks these bots, but I would much rather do it in one location at the firewall.
how can i block this user agent through mod_rewrite
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
and is this agent will affect all the IE 6 users ?
and whats is the difference between the one above and this one :
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)?
I have a rewrite for mobile clients :
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} "android|blackberry|iphone|ipad|nokia" [NC]
RewriteRule ^$ https://www.myudomain.com/Mobile [L,R=302]
My mobile site is HTML5 written and old phones doesn't support it. How to exclude f.x. old nokias - like 6220 and rewrite old phones to /Mobile_old?
I've setup my ssh to login with keys and passphrase. I would like to do away with passphrases by using agent forwarding. Putty uses Pageant to store private keys, bu from all the tutorials I can find, it's a windows based feature (to add private keys). I've also tried to use ssh-add (a different agent), but it has trouble recognizing my private key passphrase (made with putty). I know the private key is working because I'm able to use use ssh without a password, just the phrase.
What's the best way to do this? Is there a putty pageant command line that I don't know about?
Plesk from plesk server Migration, I want to do
I get the following error.
Error: No Migration & Transfer Agent found. Data migration cannot be performed.
I'd like to upgrade my server from Ubuntu 12.04 to Ubuntu 14.04. The idea is to migrate my actual server (S1) to another one (S2). Then, format and install ubuntu 14.04 with Plesk on S1, and finally migrate the data from S2 to S1. Is it a good solution? Is it possible to do this using only one server? I don't know if I can do it making a backup, install Ubuntu 14.04 and then, restore the data into the server.
However, I have a problem with the migration agent. When I go the migration page, the migration agent tries to update itself and it keep at 0% forever (I attach an screenshot).
I got error, can`t access to panel:
ERROR: Service_Agent_Exception
Unable to read apache features from the service node: [Sat Jan 10 12:25:03.013856 2015] [so:warn] [pid 32541] AH01574: module actions_module is already loaded, skipping
[Sat Jan 10 12:25:03.014058 2015] [so:warn] [pid 32541] AH01574: module auth_digest_module is already loaded, skipping
[Sat Jan 10 12:25:03.014694 2015] [so:warn] [pid 32541] AH01574: module authz_user_module is already loaded, skipping
[Code] ....
I cant access gmail from my internet connection, but google is opening and also all other emils are opend(yahoo,aol...). Im using windows 2000 OS. Is it a problm of mail server of gmai?
View 4 Replies View RelatedHow do you defend against browser spoofing? From the tutorials shown at [url]. it seems really easy to spoof a firefox useragent.
View 5 Replies View RelatedI'm trying to download this 1 GB file on my Linux server CentOS. But its requiring me to enter a Captcha image which doesn't show up using Elinks or Lynx the two browser I tried.
Wget was my first thing that I tried but that wouldnt work since its impossible to enter the captcha using wget command.
So I need some help how should I download this to my server I'm on Slow DSL connection and it would take weeks to download 1 GB using my desktop and then reuploading it again to server using FTP.
I know that if you want to access your ftp account from a browser you use this link format:
ftp://username : password@yourdomain.com
But what happens when your usersame is in the form of: username@yourdomain.com
How can I access my ftp from a browser then?
i run a browser based game in (php/mysql/javascript) and i currently have noticing with the growing numbers of players that my shared hosting is not going to handle the load, obviously.
i am not sure if this is the right place to ask but are there any hosting companies out there willing to negotiate a deal where they provide hosting for such a thing in return of advertising?
we havent even began to advertise the game and expand it, it will reach thousands of players easely... we would need atleast 2 highend boxes to split up the database from the webserver.
This is the error i'm getting after i installed my cert.
i did the installation in plesk 9 and it asked for three files:
1. private key
2. certificate
3. CA bundle
for the CA bundle i used the: intermediary_certificate1.cst, intermediary_certificate2.cst, & root_certificate.cst files and in that order.
What could have went wrong? and how can i get rid of this error?
My client was rather forcibly moved to a VPS by their host (long story, involving inadequate PHP memory allocations).
I've run sites on MediaTemple's VPS's without any issues. This one, via Network Solutions (not my pick) is driving me nuts. It uses Plesk and Virtuozzo, and is, I believe, running Redhat.
I am able to FTP files into httpdocs, but when I try to pull them up via browser, I get 404's. Additionally, the default landing page persists, even though I deleted their index.html.
I can SSH with root, but have thus far not been able to find my way to httpdocs via command line. Updated: scratch that. Found it. Files are there...
I am accessing solely via IP, as I do not want to redirect the domain until the new site is up and running.
Any thoughts on where I need to be looking for a solution? I'm not really a server person, though this is the first time I've encountered so much trouble. I do not foresee NS support being much help, per prior (recent) experience.
I got a list of IPs from the country i want to block from blockacountry.com and i added them to my .htaccess as I have no access to PF or IP tables firewall.
I am concerned about the server load if I get too many requests from that country to access the webpage, I have been told of a better solution, blocking someone based on the browser language they use, for example for China that is "zh-CN" but I don't know how to implement this and I have not been able to find it through Google, help with this appreciated.
Second thing, anyone knows what happens when someone attempts to access a webpage from a blocked IP? Do they get a "Page not found" or "your IP is blacklisted" message?
If I block by browser language it would be good if the blocking message does not tell the user about this
(Notice that I am aware that blocking by browser language is not a perfect solution).
I have setup an Addon Domain in cPanel.
[url]is pointing to:
[url]
That is working fine, test it for yourself.
However, I want the URL in the browser to read: [url]but currently as you can see the long URL appears.
How can I make the short clean URL appear in the browser?
I recently initiated "Hot Link Prevention" on one of my web sites on my Dedicated server (via CPanel). It woks well in re-directing hotlinked images to a small image that says "Unauthorized Hotlink Image." This of course prevents other web sites from leaching my bandwidth. However, I have had a number of people complain that when they visit my forum, they don't get my site's images, but instead see the Unauthorized Hotlink Image. The common thread seems to be the people with the problem are using Security Software. In one case, a guy is using Norton Confidential. Another guy is using some Security software provided by his ISP. I'm guessing that this security software is somehow messing with the Referer in tehir browser and confusing my server into thinking the images are being hotlinked from some other site. Short of turning off Hot Link Prevention, does anyone have any suggestions to tell the folks...are there settings in their Security Software for example that will prevent the problem when they visit my site?
View 4 Replies View RelatedI have upgraded to Apache 2.4 and Php 5.5.7. I am not able to get any php script to show output in the browser. Html and text files work fine.
phpinfo works fine and shows output.
Phpmyadmin gives "No data received" in chrome and "The connection was reset" in Firefox.
In command line php -f filename gives me output.
Last lines of my Apache error log:
[mpm_winnt:notice] [pid 2028:tid 376] AH00456: Apache Lounge VC11 Server built: Nov 21 2013 20:13:01
[Fri Dec 20 2013] [core:notice] [pid 2028:tid 376] AH00094: Command line: 'C:Program FilesApache Software FoundationApache24binhttpd.exe -d C:/Program Files/Apache Software Foundation/Apache24'
[Fri Dec 20 2013] [mpm_winnt:notice] [pid 2028:tid 376] AH00418: Parent: Created child process 2628
[Fri Dec 20 2013] [mpm_winnt:notice] [pid 2628:tid 276] AH00354: Child: Starting 64 worker threads.
In Php log it is giving no error.
httpd -t shows: Syntax ok
php -v shows:
PHP 5.5.7 (cli) (built: Dec 11 2013 13:48:27)
Copyright (c) 1997-2013 The PHP Group
Zend Engine v2.5.0, Copyright (c) 1998-2013 Zend Technologies
i signed up for vps from vps.me and i got ssh credential i logged in ssh using token2shell but when i put my server ip "10.223.1.157" in google chorome but then it says unable to find even i am not able to access ftp through filezilla also
View 3 Replies View RelatedMy server was hacked so they did a OS reload. Everything seemed ok then they did the Level 2 Security Plan which includes
Update kernel to the latest release
Update security patches
Thorough security audit
Installation and configuration of firewall
Installation of security updates as released by OS vendor
Installation of security updates as released by Control Panel vendor
Configuration changes as desired by customer
Disabling of unused and insecure services
Removal of insecure packages and unnecessary software
Regular scans for easy-to-guess users passwords
Log auditing for unusual activity
Investigating hacking attempts
Restoring files from backup
Anti-spam configuration
Anti-virus configuration
Anti-DoS/DDoS kernel code tweaking
Default system users removal
SSH server hardening
Mod_Security (Intrusion detection and prevention engine for web applications)
Securing /tmp directory
Kernel tuning with sysctl
Snort (Network Intrusion Detection System)
Acid (Analysis Console for Intrusion Databases)
Smartd (HDD Reliability monitor)
SIM (System Integrity Monitor)
PRM (Process Resource Monitor)
SPRI (System Priority)
BFD (Brute Force Detection)
PMON (Socket Monitor)
Tripwire (keeps track of every file being moved/edited in the system)
CHkrootkit (Rootkit/Exploit scanner reports sent daily)
1. Now I get a timed out message via my browsers IE & Mozilla
2.When I try to FTP into an account I get this message, same message on all accounts.
[06:37:47] Connecting to 72.21.49.74 Port: 21
[06:38:08] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
3. When I try to retrieve my email via Outlook 2007 I get this
Receiving reported error (0x80042108) 0UTLOOK CANNOT CONNECT TO YOUR INCOMING (pop3) EMAIL SERVER
Here are the traceroute results (image below) Note the timed out message
Servstra keeps telling me everything works on their end...... yet I cannot get to the server any longer.
I am working with an Apple Lion Server. I want to give users the possibility to gain access to certain share points with the webbrowser via the WebDAV protocol. The OS allows to define sharepoints with the GUI. In this GUI you can adjust, that the users are allowed to access the sharepoints via WebDAV but it is not possible to access the folders via a browser. You just get an error from the webserver after a login:
You don't have permission to access /webdav/ on this server.
So I have looked for the relevant configuration file "httpd_webdavsharing.conf" (apache v2.2)
Code:
#
# Apache Config for WebDAV Sharing
# Activated and deactivated by com.apple.webapp.webdavsharing webapp
#
RegisterResource "WebDAV Sharing: %c %s" /webdav main webdav
RewriteEngine On
RewriteMap webdavmap prg:/usr/libexec/webdavsharing/webdavsharing_mapper
[Code] .....
Is there a way to modify the code in such a way that it allows the favoured access?
I want to know what settings to make in the Dns of my Server so always to show the www. in the browser, before the domain name.
For example, in the url to be www.mydomain.com and not mydomain.com
Apply an IP fix to a specific domain but this domain dont resolve on browser [URL] .....
On chrome i got this : ERR_NETWORK_ACCESS_DENIED
I already disable iptabes and denyhosts
I check on dnsstuff and everything seems good.
I check ifcfg-eth0 file - ok
IP its add into Plesk panel by ToolSetings -ok
Its set on domain by Hosting parameters -ok
Reverse on IP is ok ....
I don't quite know what to make of this, but I am getting hits to my search pages with the following:
/advanced_search_result.php?keywords=Hello%21%20Perfect%20and%20
/advanced_search_result.php?keywords=Hi%21%20Good%20site%20respe
There are multiple occurrences of this at any one time, and the interesting thing is that it appears to be spoofing the source IP addresses - most are all different with few exceptions.
Has anyone else seen this and know of a solution? Normally I would simply use IP deny but given the addresses appear to be spoofed and too numerous it would be futile.. I thought if I programmed OSC to quit if it matched the keywords might be a decent solution, but so far I haven't had any luck
I searched google and this forum to see if I could find out anything with no luck at all, so I'm guessing this
is fairly new.
When i try to go to horde after my upgrade from plesk 11.5.30 to plesk 12.0.18, my horde is loading as minimal cause this:
JavaScript is either disabled or not available on your browser. You are restricted to the minimal view.
But my javascript is enabled for this site.
I found a strange PHP file in a strange folder on a VPS I am using to host a few sites. I've looked through the logs but can't figure out how it got there and I've look at the code and can't make any sense of it. Can somebody take a look at the code and tell me what they think of it: .....
View 12 Replies View Related