Get Paid to Participate - up to $1 per post!     Twitter     Facebook     Google+
Hosting Discussion
 

forgot password?



Reply


Old
  Post #1 (permalink)   01-05-2006, 04:43 PM
HD Amateur
 
Join Date: Jul 2005
Posts: 82

Status: lcryan is offline
How do you guys monitor your clients content I have always been faced with this problem on how to keep tabs I trust most of my current clients had a few bad seeds but with getting bigger is alot more accounts that I need to monitor more often. I am talking about warez porn irc's all that stuff I mean you catch it when the server load spikes but any ways you guys try to prevent it?
__________________
<< Please see rules for signature guidelines. >>
 
 
 


Old
  Post #2 (permalink)   01-05-2006, 08:03 PM
HD Master
 
Join Date: Mar 2005
Posts: 395

Status: AlEast is offline
This is a good question. I was wondering of a list of common file extensions people might use.
__________________
Award winning community!
www.talkwebhosts.com
 
 
 


Old
  Post #3 (permalink)   01-06-2006, 03:35 PM
HD Addict
 
Join Date: Mar 2005
Location: Orlando, FL
Posts: 120

Status: xion is offline
use "locate" in ssh

Typical Bad things to look for:
psybnc
... (directories named ... usually have buches of bad stuff in them)
cgitelnet
bd.pl
ebayisapi
websrv
r0nin
phpshell
c99shell
__________________
Mark
http://www.xionhosting.net
 
 
 


Old
  Post #4 (permalink)   01-06-2006, 10:00 PM
HD Guru
 
Join Date: Jan 2005
Posts: 850

Status: talkwebhosts.co is offline
My data center tends to notify me of the bad seeds. It would be great to have a means of detecting these bad seeds before they occur, but normally you end up with them via some sort of fraud order.
__________________
Web Hosting Forum :: Come Help Build A New Hosting Community!
TargetedWebTraffic.net :: Purchase Quality Targeted Traffic For Your Website
 
 
 


Old
  Post #5 (permalink)   01-07-2006, 05:15 AM
HD Amateur
 
Join Date: Dec 2005
Posts: 88

Status: siteseer is offline
I would say monitor the new ones. Make sure existing clients know they can't violate your best practices without a freeze.
 
 
 


Old
  Post #6 (permalink)   01-23-2006, 08:01 AM
Account Disabled
 
Join Date: Jan 2005
Posts: 49

Status: marker is offline
I agree with siteseer, monitoring new clients for a few months will be an easy task to do rather than monitoring all.
 
 
 


Old
  Post #7 (permalink)   02-01-2006, 01:42 AM
HD Newbie
 
Join Date: Feb 2006
Location: Indiana/Texas
Posts: 8

Status: mobiuz is offline
Regardless the size of your member base, it is definitely good practice to check in on what your users are doing. Some like to pretend they are naturally doing the right thing. Other instances, honest clients will make an honest mistake.

If you have root access to your server and are running RedHat, I periodically check the /home directory to the server and individually check each account (even if it takes 3 weeks to get it done).

If you would like to take a quick peek at a users activity run the following command (if they are actively logged in with FTP, SSH, ect)

ps -fu theirusernamehere

So if you do ps -fu root you will be able to see all your activities, commands, processes ran for the user root. This command is also ideal for locating a users PID# in the event you need to kill their activity on the spot. Most excellent for killing inactive users.

Regularly run the "top" command or "top -c", look for things out of the ordinary. If you see the user "nobody" (Apache) running a process you are unfamiliar with investigate it.

Make a routine habit of checking your server's temp directory (usually /tmp)
You can find all sorts of valuable info there. In stereotypical cases you will find eggdrops, ect housed in the temp.
 
 
 


Old
  Post #8 (permalink)   02-20-2006, 05:23 AM
HD Newbie
 
Join Date: Feb 2006
Location: England
Posts: 26

Status: imported_Gareth is offline
Quote:
Originally Posted by xion
use "locate" in ssh

Typical Bad things to look for:
psybnc
... (directories named ... usually have buches of bad stuff in them)
cgitelnet
bd.pl
ebayisapi
websrv
r0nin
phpshell
c99shell
Thanks xion, works perfectly.
__________________
Reliable WebHosting FREE Web Directory
 
 
 


Old
  Post #9 (permalink)   02-22-2006, 03:59 AM
Account Disabled
 
Join Date: Jan 2005
Posts: 49

Status: marker is offline
Xion thanks for the useful hints you have provided.
Could you also specify which keyword relates to which "bad" thing? So that we can have more detailed info on bad software we have to watch for...
 
 
 
Reply

Thread Tools

New Post New Post   Old Post Old Post
Posting Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Sponsored By: