Sometime it’s useful to do an assessment of what’s online on your network, probably you think to know every server and service running, but I had more than one surprise in the past, with “test server just plugged in for a short time”, “New test service” or worst, hacked machine that exposed “new service”.
Network scanning is a procedure for identifying active hosts on a network, either for the purpose of attacking them or for network security assessment. Scanning procedures, such as ping sweeps and port scans, return information about which IP addresses map to live host and the active ports on every server. Continue reading »

Sometimes happen that you find a sequence of links, and so you should start to follow them to see exactly what command are you about to run, or the directory used in that symbolic link, or you can use readlink.
On our server we have (or you should have) tons of logs generated, logs from various daemons (ssh, iptables, monit, fail2ban), services (apache. nginx, bind, ftp, etc.) and system logs (syslog, messages, kernel).
Today I present another