Banned IP address on you're Site...... JF programmers

Banned IP address on you're Site...... JF programmers

Badala ya kutumia PHP ku-BAN IP addresses nadhani ingekuwa vyema zaidi kama ungetumia .htaccess file ku-BAN IP addresses kwa sababu .htaccess files huwa zinakuwa processed kwanza kabla ya code nyingine yoyote ndani ya website.

Lakini pia unapaswa kufahamu kuwa ku-block IP address haiwezi kukusaidia sana unless kama unataka kublock IP address za nchi zote. Mfano: Kwa kawaida spammers/hackers huwa wanakuwa na mamilioni ya IP address, kwa hiyo kama uki-block hiyo IP address then huyo spammer/hacker atabadili na kutumia IP address nyingine, ukiblock na hiyo IP address nyingine then atabadili na kutumia IP address nyingine.
 
CodeR GodivA said:
Young Master
.
Thanks for you're feedback kaka
.
Lakini black hat huyu huyu awe na kiasi chote hicho cha ip .
.
Afu iwe kama uki i ban Ip yake fulan atumiE nyingine...
.
Hacker yeyote duniani hawezi kufanya hivyo.. Akiwa anajua uki ipata real Ip address moja tu inatosha sana kumkamata..
.
BTW Nothing more than VPN...
Click to expand...

Actually they can na ndio maana nikasema unless uwe unataka kublock the whole country kwa sababu hacker huyo huyo ana uwezo wa kubadili IP from one location to another. Kwa mfano unaweza kumkamata huyo hacker/spammer kwa kutumia IP flani and after tracing it unagundua kuwa yupo nchi flani mfano China then atakapochange IP sidhani kama atatumia IP ambayo ipo location hiyo hiyo lazima atatumia IP ya location nyingine.
 
CodeR GodivA & Young Master mi naona ni bora kutumia .htaccess na kuzi ban ip lakini sio kwenye plain .txt mi naona ni vema kutumia database.

Kuna kitu nimegundua ila sijajua kama ni sahihi.

Je ni kweli kuwa hosting wanaotumia cPanel wateja wao wako kwenye hatari kubwa ya kuwa hacked kuliko wasio tumia cPanel.
 
Last edited by a moderator:
CodeR GodivA said:
.
Ni hatari sana mtu anapo host site na Cpanel..
Kwanza kabisa admin mwenyewe.... Anaweza akatumia weak password hacker aka guess
.
Na hata akitumia strong password vipi basi hacker anaweza kum backtrack na trojans e.tc na pia hizi keyloggers pia
.
Ikishindikana kabisa basi hacker ata anzia kwenye email ya admin akiweza kui hack email tu basi ataingia kule anako host site na kujifanya kasahau password.... Waki m retreave tu na link basi huyo mdogo mdogo anaingia kwenye admin page...
.
Basi hapo users wote watakuwa kwenye :shetani:
.
Click to expand...

Nimetokea kuichukia sana cPanel ingawa ni rahisi kutumia. Nimejaribu kutumia host tofauti tofauti na sasa natumia DreamHost na nimeipenda sana WebPanel yao ingawa kwa mara ya kwanza inaonekana complicated.
 
Nyasiro said:
Nimetokea kuichukia sana cPanel ingawa ni rahisi kutumia. Nimejaribu kutumia host tofauti tofauti na sasa natumia DreamHost na nimeipenda sana WebPanel yao ingawa kwa mara ya kwanza inaonekana complicated.
Click to expand...

.
Wako vizuri sana hao jamaa.... Na Cpanel yao ilikuwa ina allow ssh yaani ukimtengenezea user mmoja nayeye anakuwa na extra power kama admin vile ila ni hatari sana sijui kama wame itoa..
.
Mi nawaangalia kwanza HOSTYD mana Nilijaribu kutumia HOSTINGER lo wanauzi kinoma kwenye matumizi ya Ip address...
.
.
 
CodeR GodivA said:
.
Ni hatari sana mtu anapo host site na Cpanel..
Kwanza kabisa admin mwenyewe.... Anaweza akatumia weak password hacker aka guess
.
Na hata akitumia strong password vipi basi hacker anaweza kum backtrack na trojans e.tc na pia hizi keyloggers pia
.
Ikishindikana kabisa basi hacker ata anzia kwenye email ya admin akiweza kui hack email tu basi ataingia kule anako host site na kujifanya kasahau password.... Waki m retreave tu na link basi huyo mdogo mdogo anaingia kwenye admin page...
.
Basi hapo users wote watakuwa kwenye :shetani:
.
Click to expand...
Mkuu naomba ufafanuzi wa kitaalam kwa nini unaona ni hatari kuhost site na Cpanel? Ninavyofahamu mimi Cpanel ni tools tu ya kukurahisishia kazi. Nilihost na monster.com halafu nyingine na godaddy.com na wote wanatumia Cpanel.

Kuhusu admin kuwa na weak password hilo ni kosa lake mwenyewe!
Na hata akitumia strong password vipi hacker anaweza kum backtrack .... Ndo maana tunainstall security software kwa ajiri hiyo. Na kuhusu Key loggers karibu antivirus zote zinaitambua.

Hacking ya email mara nyingi njia rahisi wanayotumia hackers wengi ni social engineering, na kama wewe ni admin lazima utajua mambo hayo vizuri sana unless umekurupukia fani za watu. Kitu kingine ni kwamba password siyo rahisi vile kuhack ukiwa kwenye console / au web interface inategemea imekuwa setup kivipi kuna zingine ukikosea password mara mbili ya tatu inakulock out, na kuirudisha lazima uwapatie majibu ya test question ulizojaza upokuwa unafungua acc.

Nionavyo, hatari unayoongelea si hatari vile ila ni matatizo yanayojitokeza kwa kutokutumia tools kama zilivyokusudiwa. Human errors wala siyo tatizo la udhaifu wa technology ya jamaa.
 
CodeR GodivA said:
.
Wako vizuri sana hao jamaa.... Na Cpanel yao ilikuwa ina allow ssh yaani ukimtengenezea user mmoja nayeye anakuwa na extra power kama admin vile ila ni hatari sana sijui kama wame itoa..
.
Mi nawaangalia kwanza HOSTYD mana Nilijaribu kutumia HOSTINGER lo wanauzi kinoma kwenye matumizi ya Ip address...
.
.
Click to expand...
User yeyote anayeweza ku access Cpanel ni lazima awe admin, otherwise haitakuwa na maana yeyote kwa user wa kawaida kupata access ya Cpanel, atakuwa anatafuta nini huko?
 
JuaKali said:
Mkuu naomba ufafanuzi wa kitaalam kwa nini unaona ni hatari kuhost site na Cpanel? Ninavyofahamu mimi Cpanel ni tools tu ya kukurahisishia kazi. Nilihost na monster.com halafu nyingine na godaddy.com na wote wanatumia Cpanel.

Kuhusu admin kuwa na weak password hilo ni kosa lake mwenyewe!
Na hata akitumia strong password vipi hacker anaweza kum backtrack .... Ndo maana tunainstall security software kwa ajiri hiyo. Na kuhusu Key loggers karibu antivirus zote zinaitambua.

Hacking ya email mara nyingi njia rahisi wanayotumia hackers wengi ni social engineering, na kama wewe ni admin lazima utajua mambo hayo vizuri sana unless umekurupukia fani za watu. Kitu kingine ni kwamba password siyo rahisi vile kuhack ukiwa kwenye console / au web interface inategemea imekuwa setup kivipi kuna zingine ukikosea password mara mbili ya tatu inakulock out, na kuirudisha lazima uwapatie majibu ya test question ulizojaza upokuwa unafungua acc.

Nionavyo, hatari unayoongelea si hatari vile ila ni matatizo yanayojitokeza kwa kutokutumia tools kama zilivyokusudiwa. Human errors wala siyo tatizo la udhaifu wa technology ya jamaa.
Click to expand...

Naam, umenena vyema mkuu.
 
Pengine labda unasahau kitu kimoja mkuu CodeR GodivA, kwa kawaida web hosters huwa wanaweka security upande wa server zao na wanahakikisha kwamba server zao zinakuwa protected against all types of threats like Brute Force attacks, DoS, DDoS etc.

Lakini kuweka security upande wa server haina maana website yako pia itakuwa secure, lazima wewe uliyehost website yako hapo uchukue tahadhari kwa ku-secure website yako ama sivyo utakuwa hacked tu upende usipende kwa sababu web host huweka security upande wa server zao sio upande wa website unless uamue kulipia zaidi kwa ajili ya kuwekewa security ktk website yako na ndio maana hata mtu anapohack website anahack website moja, mbili, tatu n.k ktk server husika na sio website zote. Kama server ingekuwa haiko secure then huyo hacker angeweza kuhack website zote ktk server hiyo na ikiwezekana hata ku-take down server nzima.
 
CodeR GodivA said:
......
.
Na vile vile kwa website nyingine to find cpanel
account tuna anza na ku find configuration
files on all site on the server, then
find user name all user in server.
Next..
You can crack it using username
as user and password in
configuration files as password
........
Usishangae watu wana hack tu Goverment website Jaribu kuwa aware dunia ndo inaishia hii
Click to expand...

You sound like a real hacker....buddy ! In doing so you are violating GAMES's rules....anyway, go go on buddy...!
 
TUJITEGEMEE said:
You sound like a real hacker....buddy ! In doing so you are violating GAMES's rules....anyway, go go on buddy...!
Click to expand...
ndio anachokifanya akiwa kwenye pc wakati wengine tunaangaika na rahatupu mara brazzers tabu tupu..
 
TUJITEGEMEE said:
You sound like a real hacker....buddy ! In doing so you are violating GAMES's rules....anyway, go go on buddy...!
Click to expand...
.
I've n't dude....
Don't say thats lol i fill like am not a human any more.....
And who knows what a Frog does under water?
.
You're not sure yet if am black or white hat any more, but don't enter my world u'll be shocked buddy......
.
In this Forum we assume every one use it for educational purpose, and not to harm others!
.
Unasikia now DDoS became very popular na one part
of the target audience is kids, that use
booters to kick somebody off an on-line
game. Hawa kids they don't need to know
anything about the system, all they want
to do is press a button. Hawajali if
it is a botnet that is attacking, amplified
attack or whatever, they just care about
knocking somebody offline for a few
minutes.
 
You must log in or register to reply here.

Similar Discussions

Our Community

Coming Soon

Regional Communities

Coming Soon
Back
Top Bottom
Menu
Forums
New posts
Log in
Register