- Community Home
- >
- Servers and Operating Systems
- >
- HPE ProLiant
- >
- ProLiant Servers (ML,DL,SL)
- >
- HP ProLiant DL360E Gen8 - iLo 4
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-08-2018 09:35 AM - edited 03-08-2018 09:38 AM
03-08-2018 09:35 AM - edited 03-08-2018 09:38 AM
HP ProLiant DL360E Gen8 - iLo 4
Hello !
I own a HP ProLiand DL360E Gen8 server colocated into a datacenter.
I've connected iLo with static IP address which response normally on PING but cannot accces web interface (
s1-admin.***-hosting.ro refused to connect.)
.
I also tried to reboot sever and reboot CLI interface via SSh [map1 reset].
Any idea what should I do ?
Greetings !
EDIT: Everything was fine till few days ago, nothing happen in this time, now just cannot connect without any configuration change.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-08-2018 11:31 AM
03-08-2018 11:31 AM
Re: HP ProLiant DL360E Gen8 - iLo 4
I have news guys.
I've used a online scanner on my server IP address and i've found that, server got new ports for web interface.
Scan result:
22/tcp open ssh 8081/tcp open blackice-icecap 9443/tcp open tungsten-https 17988/tcp open unknown 17990/tcp open unknown
I had a look on logs and I didn't found any suspicious login, what happen ? Till last login (few days ago) port was 443 [I always tried https].
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-08-2018 11:55 AM
03-08-2018 11:55 AM
Re: HP ProLiant DL360E Gen8 - iLo 4
Update 2: I've found suspect login details [user hp, group hp].
Anyone else have those login details ? I'm pretty sure i don't had this login before, i didn't added it manually and i had a strong password on main account.
Any possibility?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-08-2018 12:06 PM
03-08-2018 12:06 PM
Re: HP ProLiant DL360E Gen8 - iLo 4
Best practices for iLO are to not expose it directly to the Internet. Some port prober/attacker probably locked up the web interface which is why port 443 is no longer responding
The ports you have listed are standard known ports for various iLO functionality, with the exception of the missing port 443 for the web interface
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-12-2018 01:25 AM
03-12-2018 01:25 AM
Re: HP ProLiant DL360E Gen8 - iLo 4
My server got hacked again.
I've found this in logs and on lookup i found that attcker it's from China.
What happen ? Isn't iLo safe ?