Re: I've been hacked, or not?

2015-04-13 Thread Efraim Flashner
On Mon, 13 Apr 2015 20:11:57 +0300 Shachar Shemesh shac...@shemesh.biz wrote: On 13/04/15 19:34, Shachar Shemesh wrote: What I'd really like to do is take such a process that I know is hanging on connection to the web site, and find out which request it thinks it is serving. I love

Re: I've been hacked, or not?

2015-04-13 Thread Shachar Shemesh
Yes. That's top advice IF you are working off someone elses money and/or paying for your own time. If, however, this is something done in your spare time, serving mostly you and being paid for out of your own pocket, the difference between 8/mo and what you said becomes big. Shachar On Apr 14,

Re: I've been hacked, or not?

2015-04-13 Thread Amos Shapira
On 14 April 2015 at 02:34, Shachar Shemesh shac...@shemesh.biz wrote: If I just reinstall the server (both time consuming and expensive, as I need provision a temporary server to make a smooth transition), I'm still going to be open to the same attack vector unless I do something. Don't you

Re: I've been hacked, or not?

2015-04-13 Thread Amos Shapira
Please allow me to disagree, I see top value in spending some time to learn to set it up automatically - it'll pay itself in spades every time you have to update anything on that server, let alone migrate or rebuild it. Setting up a test environment with Vagrant, setting things up with Puppet

Re: I've been hacked, or not?

2015-04-13 Thread Shachar Shemesh
On 13/04/15 19:34, Shachar Shemesh wrote: What I'd really like to do is take such a process that I know is hanging on connection to the web site, and find out which request it thinks it is serving. I love this mailing list :-) No sooner had I sent this message, I knew how to figure out what

I've been hacked, or not?

2015-04-13 Thread Shachar Shemesh
Hi all, I have a server whose apache2 process is generating lots of requests to http://gthfx.com/. That's it. Nothing seems to be sent, and it's always the same page. No cookies. No different URLs. Nothing. Eventually, the apache processes build up, and all the sites stop responding. Restarting