Install the guardian. Intrusion prevention system, combined with given system security reinforcement, can prevent the server from being invaded.
How to attack the server?
You have to map his IP and inject it from Ruogang! Direct attack is the next DDOS attacker! Then catch some broilers! Go online. Then directly find his IP! ! Then attack! ! Hundreds of broilers in a class can hit a good server! !
My company's mail server is always attacked, how to prevent it?
The key to deal with external attacks is to do a good job of border protection, such as firewall equipment at the entrance and special anti-spam and anti-virus gateways, such as Symantec, forcepoint, Barracuda and Trend.
For internal attacks, we should rely more on the horizontal penetration detection technology of the information security department to find possible phishing attacks and virus attacks in advance.
How to prevent network hacker attacks?
After the general website is built, it is generally safer to have no traffic and PR value. Generally, a website with a weight greater than or equal to 2 will lead to many attacks and chicken wings. Once these situations may happen, the website will be hanged with Trojan horses and attacked by hackers.
Anti-horse hanging method:
1, users are advised to upload and maintain web pages through ftp, and try not to use ftp port frequently, and do not install the uploading program of asp.
2. Check the security of the website regularly. You can use some online tools, such as the sinesafe website hanging horse detection tool!
The user name and password of 3.asp program administrator should be complicated, not too simple, and should be changed regularly.
4. Download asp program from regular website. After downloading, the database name and storage path should be modified, and the database file name should be complicated.
5. Try to keep the program up to date.
6. Don't add a link to the background manager login page on the webpage.
7. In order to prevent unknown vulnerabilities in the program, you can delete the login page of the background management program after maintenance, and then upload it through ftp during the next maintenance.
8. Always back up important files, such as databases.
9, daily maintenance, and pay attention to whether there are unknown asp files in the space. Remember: a sweater is in a safe!
10, once it is found to be hacked, you should delete all the Trojan files unless you can identify them.
1 1. The call to the asp uploader must be authenticated, and only trusted people are allowed to use the uploader. This includes various press releases, shopping malls and forums.
Anti-attack method of website:
1. Ensure that the system files of the server are the latest version and update the system patches in time.
2. Turn off unnecessary services.
3. Limit the number of SYN semi-connections that are open at the same time.
4. Shorten the timeout of SYN semi-connection.
5. Set the firewall correctly, prohibit access to the non-open services of the host, restrict access to specific IP addresses, enable the DDoS prevention attribute of the firewall, and strictly restrict the external access of servers that are open to the outside world. Run the port mapper and scan the ports, and carefully check the privileged and non-privileged ports.
6. Carefully check the logs of network devices and host/server systems. As long as there is a hole in the log or the time changes, the machine may be attacked.
7. Only sharing with network files outside the firewall. This gives hackers the opportunity to intercept system files, and the information of the host will be exposed to hackers, which undoubtedly gives the other party the opportunity to invade.
Those who belong to business websites and don't have much energy to ensure and maintain the safety of the website, try to maintain the safety of the website by accessing CDN, high-security IP, firewall, etc. I didn't have the extra money to open CDN, high-security IP and Alibaba Cloud's Cloud Knight products, so I used the firewall of Baota Commercial License Edition. For low-level attacks, Germany can generally be protected.
@ Lu Songsong Blog