Icinga is a fork of Nagios monitoring system. There are lots of changes and upgrades compared to Nagios, especially in version 2. The main visible difference is UI which is built on ext js. Other significant differences are in hosts and services definitions. Icinga2 designed to monitor large complex environments. Pre-requisites We need to make sure to install a LAMP stack and epel repository on the CentOS7 server for other dependency application which will support icinga2 . Icinga2 will collect the service information based on the monitoring plugins, so we need to install nagios plugins. Also, we should install IDO modules for MySQL which will use for Icinga2 Web interface and other web interfaces. Then set up MySQL database (create …
Nowadays, brute force attacks on servers/websites are frequent. A brute force attack is generally a password-guessing technique. It is a type of attack that tries every possible combination of characters or data in order to find the decrypted message. Brute force guarantees finding the key – it tries every possible combination and does not rely on any potentially incomplete dictionaries or lists of possible keys. cPHulk Brute Force Protection is an inbuilt protection used in WHM to prevent brute force attacks. cPHulk Brute Force Protection will detect and block continuous failed login attempts from IP addresses. cPHulk is a brute force protection system developed by the cPanel team and is exclusive to cPanel / WHM control panels. It has been integrated …
Pyxsoft antimalware Plugin for cPanel/WHM protects your server from attacker scripts such as c99shell, r57shell, ANIShell, and hundreds more. It is a real-time Anti Malware for cPanel/WHM. Attackers can take control of your servers or can damage your customer’s data by uploading one of these scripts. Pyxsoft antimalware plugin works to protects your server in two ways: Protecting from the six server’s entrance SQL Injection Legitimate Access (SSH, cPanel etc) Web Forms FTP Brute Force Attacks Installed Trojans or shells (more…)
As we are aware, usually installing SSL Certificate requires Dedicated IP . The cost of this address is typically being passed down to the end user. Also the IPv4 address will be filled completely if every domain require a dedicated IP. So administrators decided to use multiple SSL installation on a single IP. Thus SNI (Server Name Identification) is established. >> What is SNI : —————— Server Name Indication (SNI) is an extension to the TLS protocol that indicates what hostname the client is attempting to connect. SNI is an extension of the TLS protocol, which allows browsers and servers to map multiple SSL-secured domain names to one IP address and gate, without this making any difference to the site …
The SSLv3 POODLE vulnerability, disclosed on October 14, 2014, is a protocol-level security flaw affecting the SSL 3.0 encryption standard. POODLE, which stands for Padding Oracle On Downgraded Legacy Encryption, exploits weaknesses in how SSLv3 handles padding during encryption. This vulnerability arises when plaintext is converted into ciphertext. To match cryptographic requirements, extra padding is added, and during decryption, this padding can leak sensitive information. Attackers can take advantage of this flaw through a man-in-the-middle (MITM) attack, gradually decrypting secure communications. How to Check if Your WHM/cPanel Server is Vulnerable To verify whether SSLv3 is enabled on your server, log in via SSH as the root user and run the following command: Example: A typical secure response will show: Advanced …
The International Earth Rotation & Reference Systems Service (IERS) has mentioned that an extra second is to be added to Coordinated Universal Time (UTC) at 23:59:59 on 30 June 2015 and this is to make sure the alignment of astronomical and atomic time. Coordinated Universal Time, UTC is one of the basic time conventions used by most of the world’s local time zones. This UTC time convention has been derived from a bunch of atomic clocks that are distributed across several countries globally. The rotation of our earth is not so constant and it changes a bit over time and in-turn it decreases the mean rotation speed slowly. This is the exact cause behind leap seconds that gets added up …
The VENOM vulnerability, also known as the QEMU virtual machine exploit, is a critical security flaw discovered on May 13, 2015 by security researcher Jason Geffner during a security review of virtual machine hypervisors. VENOM stands for Virtualized Environment Neglected Operations Manipulation and affects virtualization environments that rely on the QEMU emulator. What Is the VENOM Vulnerability? VENOM (CVE-2015-3456) is a virtual machine escape vulnerability located in the Virtual Floppy Disk Controller (FDC) code used by QEMU. Many popular virtualization platforms depend on QEMU components, including: If successfully exploited, the vulnerability allows an attacker to: This makes VENOM particularly dangerous in shared hosting and cloud infrastructures. How the VENOM Exploit Works The flaw exists in the emulated floppy drive functionality …
Issue Description While trying to access an OpenVZ container using the following command: you may encounter this error: Here, 10524 refers to the container ID. Step 1: Check Node Memory Availability First, verify whether the host node is running out of memory: If the system shows sufficient free memory, the issue is likely not at the node level. Step 2: Check Resource Limits (privvmpages) If memory is not the issue, the problem is usually related to OpenVZ memory limits, especially privvmpages. Check current resource usage: This file contains resource usage and limits for all containers. Step 3: Identify the Problem Container Locate the entry for container 10524 and check the privvmpages values: Then the container has hit its memory limit. …
Introduction Server security vulnerabilities can expose key services and applications to attacks. One of these vulnerabilities is the GHOST vulnerability (CVE-2015-0235). This flaw was found in the GNU C Library (glibc) and impacts many Linux distributions. Since several essential services, such as SSH, Bash, and DNS-related applications, rely on glibc, it is crucial for system administrators to check if their servers are vulnerable and implement the necessary fixes. This article outlines how to check for the GHOST vulnerability and decide if your Linux server is at risk. On Linux servers, more than 60 binaries and major services, such as SSH, Nmap, and Bash, rely on the glibc libraries. A heap-based buffer overflow was found in __nss_hostname_digits_dots(), and an attacker could …
The Config Server Mail Queue is an addon feature available with cPanel/WHM which provides with a full-featured interface to the cPanel exim email queues from within WHM. The add-on feature provides with an interface to the cPanel user accounts email configuration without having to log in to their accounts. It is domain-based rather than account-based. Features View, edit and delete email accounts, email forwarders and email filters. View and modify email account quotas Modify email account passwords List only email accounts that are over quota Modify Outgoing Mail Hourly Limits List only email accounts that are over a specified size View the total number of emails in an email account Empty an email account View emails in an email account …