Re: [users@httpd] site compromised and httpd log analysis

2022-07-06 Thread KK CHN
I request your tips to investigate further and to find the root cause of this kind of attack and how to prevent it in future..?? Make sure that you do not allow users to upload files and then execute > those files. > > - Y > > On Tue, Jul 5, 2022 at 9:53 PM KK CHN wrote: > >

[users@httpd] site compromised and httpd log analysis

2022-07-05 Thread KK CHN
https://pastebin.com/YspPiWif One of the websites hosted by a customer on our Cloud infrastructure was compromised, and the attackers were able to replace the home page with their banner html page. The log files output I have pasted above. The site compromised was PHP 7 with MySQL. >From the a

[users@httpd] Defaced Website : Few forensic tips and help

2022-07-04 Thread KK CHN
List , https://pastebin.com/YspPiWif One of our PHP website hacked on 3rd july 2022. I am attaching the httpd access files contents in the above pastebin.I hide the original URL of the website due to a SLA policy. Can anybody point out from the logs what exactly made the attacker able to b

[users@httpd] Slow web site response..PHP-8/CSS/Apache/

2022-06-23 Thread KK CHN
List, I am facing a slow response for a hosted PHP8 web site.. It takes 30 seconds to load the website fully . The application and database( postgresql ) both are separately running on two Virtual Machines in OpenStack cloud. in two 10.184.x.221 and 10.184.y.221 networks respectively. When

[us...@httpd] apache ajp interconnection Issue

2009-07-29 Thread KK CHN
Hi list, I am trying ajp connector for apache to tomcat using mod_ajpapache2.2 and tomcat 5.5on Debian platform apache and Tomcat are in separate boxes both are in same LAN. and apache machine is bind to a public IP address in firwall level. this is the virtua

[us...@httpd] .htpasswd login failure

2009-03-05 Thread KK CHN
Hi List, I added afor restricting access to my web site URL. I used Basic Authentication module.. I created #htpasswd -c .htpasswd test password : test and restarted apache . The path to AuthUserFile is absolutely the system path no error in that ..

[us...@httpd] how to do a Password protection for a RewriteRule based VirtualHost

2009-03-05 Thread KK CHN
ServerName mydomain.com RewriteEngine On RewriteRule ^/(.*) http://127.0.0.1:8081/VirtualHostBase/http/www.mydomain.com:80/site1/VirtualHostRoot/$1 [L,P] ErrorLog /var/log/apache/mysite.com/error_log CustomLog /var/log/apache/mysite.com/access.log combined Now every one can access the site