If hackers don't get you, maybe Google will

TalkBack 1 of 23:

Next »

• Thread View
• Flat View

Just a few google hacks is all it takes to return sites

Example: "intitle:index of" passwords modified

Your site shouldn't return anything for a google on "intitle:index of" and inurl:

As for sftp (ssh), be sure that your server's /etc/sshd_config is set for:

PermitRootLogin no
UsePAM no
ChallengeResponseAuthentication no
Port 62314 #example of some non-standard port

Create a publickey with ssh-keygen for passwordless login.

I spent last reviewing my logs to find that there appears to be a new 'distributed' ssh brute force attack method which will fly below 'the radar' of most intrusion detection systems.

DenyHosts is installed on my servers but this distributed brute-force technique relies on sending each successive login attempt from a different ip separated by about 30 seconds or more.

As such Denyhosts fails to sense the attack because it doesn't see just 'one ip' failing 5 times.

Follow the above ssh configuration changes to secure your system from any brute-force attack--the only way.

Also, if you run an unmanaged site, and it runs on any Linux Distro, please install AppArmor and mod-apparmor Apache module (AppArmor is standard equipment in openSUSE 10.3 and Ubuntu 8.04).

Here's an Ars Technica article that hightlights last weeks ssh attacks:

http://arstechnica.com/news.ars/post/20080515-strong-passwords-no-panacea-as-ssh-brute-force-attacks-rise.html

Be safe!

Posted by: D. T. Schmitz   Posted on: 05/18/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now