linux intrusion detection software
- by Sam Hammamy
I have an Ubuntu VPS that I use for practice and deploying prototypes as I am a python developer.
I recently started teaching my self sys admin tasks, like installing OpenLDAP. I happened to turn off the ufw firewall for just a minute, and when I ran an netstat command, I saw a foreign ip connected to ssh that I traced to china. I'd like to know…