/ notes

Quick update

It's been a while since my last update. So here's a quick rundown of what happened.


My server was compromised. Apparently, there was a unauthorized ssh connection, and the server was running some script that looked like a DDOS attack. It was spamming ssh connections.

A few things I learned, while trying to trace the cause of the hack. last and lastb can find recent connections and those that failed.

lsof -i shows a list of open connections.

More can be found at: https://www.digitalocean.com/community/tutorials/how-to-recover-from-a-compromised-droplet-sending-an-outgoing-flood-or-ddos


Facebook locked me out of my account. They gave the reason that they couldn't verify my account, even though I'd sent them my ID. So I'm not sure what's the problem here, and is still sorting out with them.

That's about the more significant things that happened.

Quick update
Share this