Mendadak Server Admin

[PusatHosting]

Hello om @pocarisweat , maksudnya IP disamarkan apa ya ? di ss saya sepertinya tidak ada ip...

itu di atas sendiri sebelahnya Putty

 

[PusatHosting]

Kalau saya biasanya proses mysql yg berat ketemunya juga dari show full processlist

4. Coba scan pakai Malware Detection RFXN mungkin ada file yang tersembunyi

 

[idnix]

Hello om @pocarisweat , maksudnya IP disamarkan apa ya ? di ss saya sepertinya tidak ada ip...

aduh gak bisa edit post disini. iya om.. itu dibagian atas pada SS keliatan ip nya

minta tolong mimin aja utk edit

 

[xperia]

Wadau.... baru bisa bernapa lega... kena phising lagi... kalau kita mau forensik/security audit... apa kita bisa deteksi:
1. File dibuat dari script atau dari akses lain (FTP, etc) ?
2. Kalau bisa, gimana cara tracenya

Thanks ya... sedih banget di phising terus...

 

[idnix]

@xperia huehuehe... kalau gak gitu gk belajar om

 

[xperia]

Ah edan... ada orang lain (atau hacker yang sama) kirim email begini:

"Greetings

We have detected a security breach in your system, [namauser], would like to share this information with the manager of these sites to help repair the damage, we provide server management and Web security services, would be a pleasure working with you a brief summary of this vulnerability is that it allows you access to the server to extract the information, which is very dangerous if it falls into the wrong hands, fortunately we work to help businesses that need our services in this way, like you if so desire, the following is a test of our credibility:

http://[domain saya].co.id/test.txt

We are a reserved team and can be assured that your information will never be revealed and which we act with full confidentiality.

Your prompt reply is expected.

Thank you very much."

emailnya dari : yarolinux.co

Hiks.. naseeeb... deal dengan mereka atau ga ya ?