Banned IP address on you're Site...... JF programmers

Badala ya kutumia PHP ku-BAN IP addresses nadhani ingekuwa vyema zaidi kama ungetumia .htaccess file ku-BAN IP addresses kwa sababu .htaccess files huwa zinakuwa processed kwanza kabla ya code nyingine yoyote ndani ya website.

Lakini pia unapaswa kufahamu kuwa ku-block IP address haiwezi kukusaidia sana unless kama unataka kublock IP address za nchi zote. Mfano: Kwa kawaida spammers/hackers huwa wanakuwa na mamilioni ya IP address, kwa hiyo kama uki-block hiyo IP address then huyo spammer/hacker atabadili na kutumia IP address nyingine, ukiblock na hiyo IP address nyingine then atabadili na kutumia IP address nyingine.
 

Actually they can na ndio maana nikasema unless uwe unataka kublock the whole country kwa sababu hacker huyo huyo ana uwezo wa kubadili IP from one location to another. Kwa mfano unaweza kumkamata huyo hacker/spammer kwa kutumia IP flani and after tracing it unagundua kuwa yupo nchi flani mfano China then atakapochange IP sidhani kama atatumia IP ambayo ipo location hiyo hiyo lazima atatumia IP ya location nyingine.
 
CodeR GodivA & Young Master mi naona ni bora kutumia .htaccess na kuzi ban ip lakini sio kwenye plain .txt mi naona ni vema kutumia database.

Kuna kitu nimegundua ila sijajua kama ni sahihi.

Je ni kweli kuwa hosting wanaotumia cPanel wateja wao wako kwenye hatari kubwa ya kuwa hacked kuliko wasio tumia cPanel.
 
Last edited by a moderator:

Nimetokea kuichukia sana cPanel ingawa ni rahisi kutumia. Nimejaribu kutumia host tofauti tofauti na sasa natumia DreamHost na nimeipenda sana WebPanel yao ingawa kwa mara ya kwanza inaonekana complicated.
 
Nyasiro said:
Nimetokea kuichukia sana cPanel ingawa ni rahisi kutumia. Nimejaribu kutumia host tofauti tofauti na sasa natumia DreamHost na nimeipenda sana WebPanel yao ingawa kwa mara ya kwanza inaonekana complicated.
Click to expand...

.
Wako vizuri sana hao jamaa.... Na Cpanel yao ilikuwa ina allow ssh yaani ukimtengenezea user mmoja nayeye anakuwa na extra power kama admin vile ila ni hatari sana sijui kama wame itoa..
.
Mi nawaangalia kwanza HOSTYD mana Nilijaribu kutumia HOSTINGER lo wanauzi kinoma kwenye matumizi ya Ip address...
.
.
 
Mkuu naomba ufafanuzi wa kitaalam kwa nini unaona ni hatari kuhost site na Cpanel? Ninavyofahamu mimi Cpanel ni tools tu ya kukurahisishia kazi. Nilihost na monster.com halafu nyingine na godaddy.com na wote wanatumia Cpanel.

Kuhusu admin kuwa na weak password hilo ni kosa lake mwenyewe!
Na hata akitumia strong password vipi hacker anaweza kum backtrack .... Ndo maana tunainstall security software kwa ajiri hiyo. Na kuhusu Key loggers karibu antivirus zote zinaitambua.

Hacking ya email mara nyingi njia rahisi wanayotumia hackers wengi ni social engineering, na kama wewe ni admin lazima utajua mambo hayo vizuri sana unless umekurupukia fani za watu. Kitu kingine ni kwamba password siyo rahisi vile kuhack ukiwa kwenye console / au web interface inategemea imekuwa setup kivipi kuna zingine ukikosea password mara mbili ya tatu inakulock out, na kuirudisha lazima uwapatie majibu ya test question ulizojaza upokuwa unafungua acc.

Nionavyo, hatari unayoongelea si hatari vile ila ni matatizo yanayojitokeza kwa kutokutumia tools kama zilivyokusudiwa. Human errors wala siyo tatizo la udhaifu wa technology ya jamaa.
 
User yeyote anayeweza ku access Cpanel ni lazima awe admin, otherwise haitakuwa na maana yeyote kwa user wa kawaida kupata access ya Cpanel, atakuwa anatafuta nini huko?
 

Naam, umenena vyema mkuu.
 
Pengine labda unasahau kitu kimoja mkuu CodeR GodivA, kwa kawaida web hosters huwa wanaweka security upande wa server zao na wanahakikisha kwamba server zao zinakuwa protected against all types of threats like Brute Force attacks, DoS, DDoS etc.

Lakini kuweka security upande wa server haina maana website yako pia itakuwa secure, lazima wewe uliyehost website yako hapo uchukue tahadhari kwa ku-secure website yako ama sivyo utakuwa hacked tu upende usipende kwa sababu web host huweka security upande wa server zao sio upande wa website unless uamue kulipia zaidi kwa ajili ya kuwekewa security ktk website yako na ndio maana hata mtu anapohack website anahack website moja, mbili, tatu n.k ktk server husika na sio website zote. Kama server ingekuwa haiko secure then huyo hacker angeweza kuhack website zote ktk server hiyo na ikiwezekana hata ku-take down server nzima.
 

You sound like a real hacker....buddy ! In doing so you are violating GAMES's rules....anyway, go go on buddy...!
 
TUJITEGEMEE said:
You sound like a real hacker....buddy ! In doing so you are violating GAMES's rules....anyway, go go on buddy...!
Click to expand...
ndio anachokifanya akiwa kwenye pc wakati wengine tunaangaika na rahatupu mara brazzers tabu tupu..
 
TUJITEGEMEE said:
You sound like a real hacker....buddy ! In doing so you are violating GAMES's rules....anyway, go go on buddy...!
Click to expand...
.
I've n't dude....
Don't say thats lol i fill like am not a human any more.....
And who knows what a Frog does under water?
.
You're not sure yet if am black or white hat any more, but don't enter my world u'll be shocked buddy......
.
In this Forum we assume every one use it for educational purpose, and not to harm others!
.
Unasikia now DDoS became very popular na one part
of the target audience is kids, that use
booters to kick somebody off an on-line
game. Hawa kids they don't need to know
anything about the system, all they want
to do is press a button. Hawajali if
it is a botnet that is attacking, amplified
attack or whatever, they just care about
knocking somebody offline for a few
minutes.
 
You must log in or register to reply here.

Similar Discussions

Menu
Log in
Register
Cookies are required to use this site. You must accept them to continue using the site. Learn more…