my website is under attack, when i search in httpd logs it shows my server ip is atackking with brute force requesting an php url , but is not thats why fail2ban and apache mod_evasive cant blokecked

Hi, I can quickly and professionally find the attackers source IPs and work on both removing the malware/exploit from server and block the attackers. Additionally i can work on server to prevent any vulnerability/exploit infections. I am CISA, CISSP, RedHat certified admin with more than 15 years of system and security experiences. If i cant solve the problem within hours you are free to select someone else without any fee. I am reliable, hardworking and i never leave a job incomplete. Kindly check my previously completed projects and reviews. Thank you for your time, Regards, Emre Pardus

Hello, Hope you are doing well. I have 6 years of experience on Linux and Server Security. For Fail2ban, We need to write Exact regex for blocking, It may be issue related to that. Other that fail2ban and apache mod_avasive. We need to Secure server with proper firewall. I can handle this task. Regards, VishnuLal

HI, I can help you in FIXING and BLOCKING the IP Please let me know when we can discuss the tasks in more details and start work. Looking forward for your response. Thanks.

Hi, I have read your exact requirement in which you have mentioned that your server IP is attacked. I will fix it as per your guidance. Regards Karuna

HI i am an expert programmer with a great experience in handling server and server configurations. I can help you with that let me know the mre details r share the log with me so that can investigate it in more details.

hii. hope your doing well i have done many projects which is same as yours and i am very sure about this job please reply so i can show you my previous work Thanks

Hi there! I am a system administrator security focused with 5+ years of experience configuring and securing servers. I can fix your issue and protect your server to avoid that kind of attacks in the future. I am available to start.

What's the output of below commands netstat -tn 2>/dev/null | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr | head netstat -nap | grep SYN -c About myself https://www.freelancer.com/u/redssr.html

When the website is built on PHP and MYsql, and if its not secured than the unwanted persons upload their files and try to retrieve information/data through forms. They use your domain name through different IPs. That is why you get this kind of messages you mentioned in the description. Solution would be- Files and sub domain needs to be checked, the unnecessary things created needs to be deleted. PHP codes are required a fix. and many more things. May be you will be getting deceptive site warning from google as well Please initiate a small chat to discuss. I know how to deal through this Best regards

I can fix it. I'll findout the attacker and harden the security of your site. I'm a Server & Linux System Admin, AWS & Microsoft Azure Cloud Expert, Email Server & DNS Expert, Web Security Analyst & Website Performance Optimizer, Web Designer.

Hi, before accepting, please read: what kind of server is it? is there any firewall installed and enabled (ufw,iptables, csf). Is there anything else running on the server? what are the settings for fail2ban-jails? Are there any open connections, which could point to a syn-flood attack? Is cloudflarfe enabled? Best, C

Hi, thanks for posting an interesting project. As I understood you use a linux as a web server, I think we can simply install Redis database and log there request IP-s. By that we can develop some simple throttler (ratelimiting) where if user has request rate of for example more than 20req/sec, then we can add that IP into the blacklist. I'm an experienced web developer working on various types of web applications including ratelimiting , IP blocking and security and I think I can easily help you out with this project. Please send a message and let's get started ASAP. I'm available right now and can complete this task by Monday (GMT +04). Thanks. Giorgi.

hello,i am puja ..I have read your proposal i have more than four years experience in this field. I think I am the right person for solve out the problem.

Hi, we are expert in protecting servers from Brute Force, DDOS & Malware Acts. We will use highest security features in your systems to prevent them from any further attacks. We can do your work for $30.

Hello, I have a good experience with DOS and DDOS attacks. If it's a DOS, we'll stop it. I'd need to ssh to your server and see the connections, and probably your mod_evasive setup as it's apparently not doing the job. Bests, Istvan Prosinger

I have good experience and knowledge on problem solving and troubleshooting in Linux operations and processing.

To be honest, i need to more details to investigate but as far as i know , it's the initial process 1. change the root password. 2. Temp run script to block the IPs that are trying to login more 3. run some steps related to apache security and extract the IPs in log file 4. for permanent solution, i advice you to install OSSEC system