Automated detection and reporting
Security that acts, not just waits.
Securing a server is more than installing a firewall and a few basic rules. The servers I manage spot, block and report malicious behaviour themselves, thanks to scripts I developed in-house, ready to install on your OVHcloud VPS or dedicated server.
# log monitoring: ssh · apache · postfix
03:12:41 ssh 8 failed logins 203.0.113.24
03:12:41 threshold exceeded → blocked at the firewall
03:12:42 reported to AbuseIPDB (category: SSH brute force)
03:27:08 apache scan of 46 non-existent URLs 198.51.100.7
03:27:08 abnormal behaviour → blocked · reported
03:41:55 postfix burst of SMTP logins 2001:db8::5
03:41:56 blocked · reported
✓ server quiet · continuous monitoring
Log analysis
Critical logs (SSH, Apache, Postfix…) are monitored continuously to automatically spot:
- repeated or suspicious login attempts
- automated scans
- mass authentication failures
- abnormal behaviour on the network
Automatic blocking
As soon as an IP address exceeds the alert threshold, it is added to the firewall's blacklist and blocked at the source, before it can interact with the server again.
Result: less load on the server, and stronger overall security.
Reporting to AbuseIPDB
Every address identified as malicious is also reported to AbuseIPDB, an international community database, with its context: type of attack, targeted service.
By contributing, I help keep everyone safer while protecting the servers I manage.
Adaptive and transparent
The system is not set in stone: it adapts to new threats, to the services running on the server and to its actual activity.
Tolerance thresholds, report frequency, integration with other tools: everything is tuned to your needs.
The path of an attack
From the first attempt to the report.
An address tries passwords or probes the website.
The log gives it away: the alert threshold is exceeded.
The firewall cuts it off immediately, at the source.
It is reported to AbuseIPDB to protect others.
Is your OVH server properly protected?
With YF Hosting, security is proactive: it monitors, acts and alerts.
Contact me to learn more about the protections in place, or to review the security of your current website.
Let's talk
An OVH service to take over or secure?
Explain your situation in a few lines: you get a clear answer, with a costed proposal in euros excluding VAT, with no commitment.