for save my server from perl shells , many hakers can haked by cgi-telnet & r57 shell with perl how can save perl without stop it because if i stop it cpanels was disabled any one have any way to save my server from shell perl?
View 11 Repliesi use the following perl script(created by me) to save server load every 30 minutes to a log file i just keep it running in the background(probably would be more effective using cron)
#!/usr/bin/perl
while(1) {
$w = `w`;
#print $w;
$w =~ /load average: (.+)
/;
$log = $1;
my ($sec, $min, $hour, $mday, $mon, $year) = localtime;
my $rightnow = sprintf("%04d-%02d-%02d %02d:%02d:%02d ", $year + 1900, $mon + 1, $mday, $hour, $min, $sec);
$log = $rightnow . ": " . $log ."
";
open (OUTFILE, ">>top_logfile.txt");
print OUTFILE "$log
";
close (OUTFILE);
#sleep for 30 minutes
sleep(1800);
}
I want to save the access logs of our websites on an external server. If I do this now with the default setup, the gets overwritten every day. The desired file name format whould be: websitedomain-tld-access-2014-10-24.log
How can I tell Plesk to do this and how can I make sure the statistics keep working?
On our other servers we use rotatelogs for this.
I am trying to make a free shell service, and i was wondering if it was possible using a FreeBSD VPS, with CPanel, and additional IPs. Or would a dedicated server be required to do that?
View 11 Replies View RelatedDoes anyone have a recommendation for a company from which I can rent limited Windows accounts?
I have some clients who need 50-100 different Windows accounts for a project they're working on; Renting a dedicated server for each one is a bit much, but Terminal Services would be fine.
I've been concerned about executing commands through (./) using php and perl shells on the server
a new way of hacking these days is using perl shells , even if the perl was terminated on the server ,, or was forbidden for users
hackers upload a (perl) program to the server to use it instead of the server's own perl
any way ,,
chmoding the (ls-cat-more-less) to 4750 seems to give permission denied when exeuting these programs on the server
but the hackers also found that they could upload their own ls-cat-more-less programs and use them instead of the server's
they also could rename them ls==>ki or anything and use them like this
./ki /etc/valiases -alXrt
and the commands work like charm for them
./ <<--- this command uses the sh program on the server ,, ((sh which refers to bash on most servers))
so
./ki
is the same as
sh ki
and
bash ki
so i tried chmoding sh with 4750 and that killed the exploit
i was concerned about cpanel's and the website's functionality
so i tried changing an accounts password and creating a database ,, they both worked fine
so ,, if u thing chmoding 4750 sh is a bad idea please let me know
and if you know any other ways of disabling all the perl scripts on the server
what programmes should be installed in a dedicated server that will be used for irc hosting (shells etc) and will run FreeBSD OS?
some i have thought:
APF
identd
named
tcl
ftp
apache
Currently looking for a UK based VPS provider that allows IRC. 256-512mB of RAM, only about 5gB of HDD space required, maybe 10gB. Being at UK Solutions is a big plus, but not a requirement. Will be hosting IRC shell accounts for BNCs, Eggdrops and various IRC clients.
At least 10 IPs would also be a plus. Not certain on budget yet.
i need a company that offers all of these services.
uk or us not fussed really.
shared -
reseller -
ftp -
ircd -
shells -
eggdrop -
bnc -
shoutcast -
i have bittraffic so far. but dont really wanna use them ...
Its a cpanel server with latest version.
I have been noticing that several perl process are running most of the times which takes a lot CPU resource percentage, The server wads deployed som 5 months back but i have been noticing these perl processess from like 10-15 days, it looks like this
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
31097 nobody 25 0 7188 3284 1176 R 46 0.2 1322:57 perl
25122 nobody 25 0 8988 4104 1160 R 45 0.2 620:22.34 perl
28144 nobody 25 0 7852 3712 1232 R 34 0.2 600:18.11 perl
6878 nobody 25 0 9316 4064 1104 R 33 0.2 1007:38 perl
25120 nobody 25 0 8980 4068 1128 R 33 0.2 623:28.04 perl
8263 nobody 15 0 8496 4308 1260 S 2 0.2 0:28.21 perl
What should i do to close them all and to make them occur not anymore, I dont think there is any perl based script working on the server. Not even much PHP based functionalit, Only static HTML pages.
I have a Windows 2003 dedicated Server with Plesk Control panel
I am not able to execute CGI scripts(Perl/Python/CGI) on it
when I try to execute on it
I get these errors:
Access denied to invalid credentials 401 Error
Error is 401.3 ACL restrictions....
what I tried is
I have tried to change IIS settings for IUSR_name
and also I tried editing in httpdconf file for CGI settings and restarted the server...
but all of no use
I am executing these scripts in CGI-BIN folder and outside of it..
As root I can't save any changes inside my.cnf. Allways getting this error:
Could not open file for writing: Permission denied
I checked file permissions twice - everything seems to be normal.
In my dedicated server I have MS SQL 2005 Server whose backup is scheduled at night 2:00 am through Management Console. Now, once the backup is over I wish compress it and give the current date as the name to the compressed file.
I had tried to do it using PK Zip server but was not successful in doing so. Can any body help me in accomplishing this.
I grepped an IP address on a domain log and it showed thousands of lines. How do I save this grep result to a txt file so I can send it to someone?
View 4 Replies View RelatedMy site is going down lot of times due to high cpu quota and when i check cpu exceeded logs i could see some ip addresses trying to open non existenet permalinks i.e. my site is smartdesis.com and they try to open smartdesis.com/xxx which gives a 404 error which is causinf high cpu usage. Repetedly they are trying to open differnt urls by appending /xxx to them, i banned nearly 100 ips but they seem to be growing.
View 10 Replies View Relatedhow can i save /etc/passwd there is many linux order which show my users on server
such as :
cat /etc/passwd
cat /var/cpanel/acounting.log
ls -la /etc/valiases
ls /var/named
-----------------
and how can i disable the geting orders
such as :
wget
curl -o
lynx
I switched from Resellerzoom to wiredtree with a vps. I also have accounts with liquidweb and softlayer. All are reliable and uptimenot an issue but as far as getting help Wiredtree is just far above.
I have been there now only a few months but so far so good. If your not a real tech person wiredtree is your best bet. ANd the email response time wow!! I tried to call them once but by time I picked up the phone and waiting on hold for about 2 minutes my email was already responded to.
I am sure there are thousands of good host out there but I know on this boards when i looked no one would tell me whichto go with , they all said it depends on this and that. What I am saying is if your looking for a good VPS and your not a technical person go with Wiredtree save yourself the headache I had with others that are great host but just not ready to deal with us stupid people who dont know how to "harden" a server .
i use for login to ssh by putty
and i run very command and result
how may i saved all this command and result in putty?
Display some text in a web browser from a file called text.txt
text.txt will have many lines and some of them I do not want users to be able to modify and overwrite.
config_item_1=user can edit
config_item_2=user should see but not edit (could be on any line)
config_item_3=user can edit
config_item_4=user can edit
The user has made their changes in the web browser and clicks submit. I then need this info to be saved as the text.txt file however some checking needs to be done first. Anything matching config_item_2 should be removed. This could be on any line. Anything not matching should be permitted and added.
Panel-Version11.5.30 Update #38
BSDebian 7.4
Save Web Hosting Settings takes a long time. The Domains (Apache Server) are not reachable for 36 seconds.
If I try to download a plesk backup to my local machine it saves a file a few bytes in size in .xml.tar.html format
My other non plesk 12 machines correctly save the file in .tar format ....
I've got a 256mb cpanel vps and since I use enom's dns for all the domains going to the server, could I actually disable named (Berkely Name Server Daemon BIND) and get back 64mb ?
View 5 Replies View RelatedWhen i was running top -cd2 command following scripts are taking high cup uses on server. But when we are go home directory we didn't find any thing.
24489 "User Name" 20 0 6732 5084 1164 S 8.0 0.2 11:00.69 /usr/bin/perl -w hnc.cgi
26456 "User Name" 20 0 6876 5080 1164 S 8.0 0.2 7:23.47 /usr/bin/perl -w hnc.cgi
32569 "User Name" 20 0 6748 5056 1164 S 7.5 0.2 8:57.30 /usr/bin/perl -w hnc.cgi
update us why this script are running under some particular users and what the application of this script.
I have a website is written by Perl language. I donnt know how to run it.
I installed Activeperl 5.0 and IIS is running. I have heared someone who told me that need to install a software as Emperl/ html-emperl, is it right?
How do you install perl on a centos 5?
View 3 Replies View Relatedi have big problem all Forums in my server hacked by perl symlink see all config.php by shell perl in .txt by include
i solve it by make perl permission 000 but all thing in cpanel stop cause cpanel by perl