Trying to find who is loggin in to the server. Look in Event Viewer for Security with the filter for 4624 events: Note it is normal to see multiple logins, you are looking for specific logon types: 2 and 10 https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4624
Error: [stextbox id=”warning”]ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log). ERROR: Can’t open /var/log/clamav/freshclam.log in append mode (check permissions!).[/stextbox] Change to clamav Change to clamav
Sources: http://www.fail2ban.org/wiki/index.php/MANUAL_0_8 http://thanosk.net/content/securing-plesk-installation-using-fail2ban
Here is how to add additional IP’s to your Ubuntu server Add it to the server just on a temporary basis. A reboot will erase the changes. Using ifconfig If you want to add a secondary IP address to a NIC already in use in Linux, and have that change only temporary. Enter this command: … Read more
Stopping Exim in WHM restarts. What’s up? You should use to stop the mail server, and to keep it from starting on boot.
Source: http://blog.hyperfive.com/2013/07/how-to-setup-internal-smtp-service-for.html Also Configuring the server so you can send mail using mail.domain.com instead of ‘localhost’ or the server’s IP address. If you add the following line to the server’s hosts file it will map mail.domain.com to 127.0.0.1 which is localhost. Please note this would need to be done on each server as reverse NAT … Read more
Because fail2ban is not available from CentOS, we should start by downloading the EPEL repository: Follow up by installing fail2ban: The default fail2ban configuration file is location at /etc/fail2ban/jail.conf. The configuration work should not be done in that file, however, and we should instead make a local copy of it. After the file is copied, … Read more
Whitelisting is setup in the jail.conf file using a space separated list. Source: http://www.fail2ban.org/wiki/index.php/Main_Page
APPLIES TO: Parallels Plesk 11.0 for Linux Instructions: 1. Install epel and remi repositories: 2. Enable remi repository: In the [remi] section of the file, set the “enabled” option to 1. 3. Upgrade PHP with this command: Installation of ionCube for PHP 5.4 (optional) 1. Download ionCube: For x32: For x64: 2. Unzip file. 3. … Read more