BUYVM把vps停了，让我加强安全管理 [复制链接]
查看:172 | 回复:16

ethan · 发表于 2012-9-23 14:34:07

This ticket is notification that your service (209.141.**.**) is now suspended for being used in an outbound DDoS attack. Investigation into this incident shows that your VPS (along with 4 others) were compromised, and used to attack a remote ChinaNet/APNIC server. As the nature of this compromise appears to have been a bruteforce technique, we are requiring that you perform a full reinstall of your VPS, and implementing the following SSH security measures:

- Assign a nonstandard port for SSH
- Disable root login
- Disable password authentication
- Enable and use RSA authentication for login

As this violation was the result of a compromise, no administrative action will be taken against you. However, please be aware that the reinstall and above security measure are absolutely mandatory; any further compromise from your VPS will be considered a second offense, and treated in accordance with our Terms of Service and Acceptable Usage Policy. Once you acknowledge and reply to this ticket, your service will be reactivated for you to perform the reinstall.

---
Aldryic C'boäs, Frantech Staff
[Email/MSN] cboas@frantech.ca
[IRC] irc.frantech.ca / #frantech

=============================================
求助这4个安全措置怎么做？
- Assign a nonstandard port for SSH
- Disable root login
- Disable password authentication
- Enable and use RSA authentication for login

loveni · 发表于 2012-9-23 14:35:06

扔了吧

ethan · 发表于 2012-9-23 14:37:13

loveni 发表于 2012-9-23 14:35

扔了吧
不是说我回复了就给我重新开通吗？不是这个事？

wang3y2 · 发表于 2012-9-23 14:35:00

都人都撤了你还在上

——来自萝莉，丝袜，软妹网

ethan · 发表于 2012-9-23 14:47:25

wang3y2 发表于 2012-9-23 14:47

都人都撤了你还在上

——来自萝莉，丝袜，软妹网 ...
已经用快2月了· 一直还好·
就挂了个图片站
平时用作vpn

wang3y2 · 发表于 2012-9-23 14:48:47

ethan 发表于 2012-9-23 14:48

已经用快2月了· 一直还好·
就挂了个图片站
平时用作vpn
不让搞VPN了？

ethan · 发表于 2012-9-23 14:47:00

wang3y2 发表于 2012-9-23 14:50

不让搞VPN了？
给我发信就让我做下边这四个事。
但我不会做啊
Assign a nonstandard port for SSH
- Disable root login
- Disable password authentication
- Enable and use RSA authentication for login

ccc · 发表于 2012-9-23 14:50:30

不懂帮顶啦

mtx · 发表于 2012-9-23 14:48:00

不清楚是什么原因啊

comxp · 发表于 2012-9-23 15:00:32

Assign a nonstandard port for SSH
- Disable root login
- Disable password authentication
- Enable and use RSA authentication for login

修改ssh端口
禁用root登录
禁用密码登录
开启密钥认证登录改SSH默认端口
禁用root登录
禁用密码认证
启用RSA身份验证登录
额。。。google乱来的。。。叫你做好安全措施，为啥啊？

BUYVM把vps停了，让我加强安全管理 [复制链接] 查看:172 | 回复:16

浏览过的版块

BUYVM把vps停了，让我加强安全管理 [复制链接]
查看:172 | 回复:16