LDnB__CA's Posts

Hi, **EDIT: I figured out that it was enabling the console Shell after every reboot. I have no idea why it is doing this. Seems strange (new to this though) Last week and periodically, I have multiple enabling, disabling of the ESXi shell on my box's log. I am new to this but currently have about 4 VMs on it and loaded the DOD security STIG, which I don't think is really relevant but maybe I'm wrong. Anyways, any reason why I would see activity in my log like this? I have not done much at all on it lately yet last  Tuesday I see it enabling/disabling the shell about three times. Weeks prior to that there is similar activity.  No commands except that which makes me think perhaps someone was attempting to hack it but wasn't successful or maybe they deleted their actions from the log somehow? I went into the log because twice the shell was enabled in the web interface and I didnt remember opening the shell. Haven't done any work like that in a few months. Thank You

I am always a little miffed when I use various tools and I see that ESXi straight up tells everyone in WAN land (or even LAN) what it is running on my host. How can I go about putting it in a stealth mode so it doesn't inform everyone on how to attack it? I'm sure that if someone was motivated enough they could monitor activity and figure it out but I'd like to make that more difficult. Thanks in advance!