For the past 2 weeks, one of my servers have been hacked and slaved on a daily bases.
1. First it was from some skid network that slaved the servers for some spoofing
2. It was used for some ddos operation (against some online gaming company
3. It was someone flashing my redis keys for fun using evil redis
4. Tonight its mining quack bit coins
- May be am using no protection or am having it the wrong way. Having been too lazy on cyber security, I guess it's a beating I deserve. anyone else facing such challenges?
I just use selinux, iptables, and ipblocker for bruteforce, changing passwords flushing and regenerating keys :(
_______________________________________________________________
We must Keep on, We can't stop here