DEV Community: urdevops

Server-Side Ransomware

urdevops — Tue, 08 Sep 2026 22:34:36 +0000

👉 As ransomware continues to evolve in speed and complexity, traditional endpoint protection mechanisms often fall short, especially in environments with limited client-side defense.

👉 At present, ransomware remains one of the most prevalent forms of cybercrime worldwide. Due to its rapid proliferation and continuous technological advances, it is important to introduce conceptual changes in defensive strategies, develop new security mechanisms, and implement multi-factor detection systems.

👉 Recent threat intelligence consistently confirms the continued prominence of ransomware as a major cyber threat.

1️⃣ The ENISA Threat Landscape 2024 identifies ransomware among the most disruptive attack types.

2️⃣ the Verizon DBIR 2025 reports its involvement in 44% of confirmed breaches.

3️⃣ Sector-specific analyzes, such as the ENISA Finance Threat Landscape 2024, highlight its persistent impact across critical industries.

4️⃣ Europol’s Inter net Organized Crime Threat Assessment (IOCTA) likewise identifies ransomware as one of the most prominent and disruptive forms of cybercrime in recent years.

👉 Currently, there are many antivirus solutions and endpoint protection technologies available. However, in many cases these can be bypassed or disabled, which makes the success of an attack more likely.

1️⃣ As such malware primarily encrypts data and renders it inaccessible, the day-to-day functioning of organizations can be partially or completely disrupted during the restoration process. To minimize the damage, it is crucial to detect such attacks as early as possible.

2️⃣ For example, the LockBit malware was observed to encrypt 53.83 GB of data (100,000 files) across different MS Windows workstations in 4 min and 9 s, corresponding to an average speed of 216.18 MB/s.

3️⃣ These figures clearly highlight that rapid, preferably near real-time detection is essential for effective protection.

4️⃣ The targeted data assets are typically stored centrally and accessed by clients, often via network shares.

6️⃣ Client-side protection is generally considered less reliable, server-side file operation logs provide direct and trustworthy information on the performed activities.

7️⃣ Server-side monitoring can also serve as a basis for attack detection. Ransomware families tend to create, rename, and delete files with varying frequency, depending on their type.

🔶 A properly designed and implemented logging system, these characteristic operation sequences can be detected at fine temporal granularity.

TERMy installation problem

urdevops — Sat, 05 Sep 2026 20:33:58 +0000

NPC-Forge is a framework for building conversational agents with distinct personalities, multi-turn context, sentiment analysis, and tool-call support. NPCs run on the CPU (web browser or OS) even on embedded systems and obsolete hardware without relying on machine learning or LLMs.

#!/usr/bin/env bash

# Clone the forge from the cloud

git clone https://github.com/gioblu/NPC-Forge.git

# Step into the forge and install it

cd NPC-Forge && chmod +x setup.sh && ./setup.sh

# Install TERMy

npc-forge install npcs/termy

# Chat with TERMy

termy how are you

It is givening an error after running the above script.

termy.sh: line 9: npc-forge: command not found

termy.sh: line 12: termy: command not found

Even after refreshing the ".bashrc" script it is did not work.

Temporarily add the standard local bin to your path by running:
export PATH="$HOME/.local/bin:$PATH"

-bash: /home/username/NPC-Forge/npcs/termy/termy.sh: No such file or directory

Then the following solution worked after many frustrating attempts.

Clear the old cached paths and rescan your system for the new location

hash -r

Check for a broken alias

type termy

Navigate back to the cloned folder

cd ~/NPC-Forge

Make sure the script is executable

chmod +x npcs/termy/termy.sh

Re-run the installation

npc-forge install npcs/termy

Test it again

termy how are you

Now it worked!!!

I hope this helps.

https://github.com/gioblu/NPC-Forge/tree/main/npcs/termy

Consistent

urdevops — Sat, 05 Sep 2026 19:55:18 +0000

Hi!

DevOps, Cloud, SRE, Platform Software and Coding Nerds!

Sorry! for not being consistent for a long time. But now I am trying to be a little bit consistent every day.

I have not decided the frequency of posting articles. But when I learn something new, I will share with the community.

ELK stack & Graylog

urdevops — Mon, 23 Jun 2025 17:45:32 +0000

I faced a nasty ELK & Graylog issue today.

I am working an internship project.

The first installation tutorial I tried was in conjuction with the Filebeat.

https://docs.vultr.com/install-elastic-stack-on-ubuntu-20-04

But the project is designed with Elk stack & Graylog.

Recently I tried this article but still no success.

https://docs.vultr.com/how-to-install-graylog-on-ubuntu-20-04#prerequisites

I tried different solutions from deleting everything related elk stack but still ElasticSearch is not starting.

I am stuck kindly help.

Here are the details....

systemd details:

journalctl -u elasticsearch.service | less

elasticsearch log files

[2025-06-23T17:10:32.188+0000][2927][gc,init] CardTable entry size: 512
[2025-06-23T17:10:32.190+0000][2927][gc     ] Using G1
[2025-06-23T17:10:33.013+0000][2927][gc,init] Version: 21.0.7+6-Ubuntu-0ubuntu120.04 (release)
[2025-06-23T17:10:33.013+0000][2927][gc,init] CPUs: 4 total, 4 available
[2025-06-23T17:10:33.013+0000][2927][gc,init] Memory: 8700M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Large Page Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] NUMA Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] Compressed Oops: Enabled (32-bit)
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Region Size: 1M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Min Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Initial Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Max Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Pre-touch: Enabled
[2025-06-23T17:10:33.014+0000][2927][gc,init] Parallel Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Workers: 1
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Refinement Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Periodic GC: Disabled
[2025-06-23T17:10:33.223+0000][2927][gc,metaspace] CDS archive(s) mapped at: [0x00007f5a33000000-0x00007f5a33c97000-0x00007f5a33c97000), size 13201408, SharedBaseAddress: 0x00007f5a33000000, ArchiveRelocationMode: 1.
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Compressed class space mapped at: 0x00007f5a34000000-0x00007f5a74000000, reserved size: 1073741824
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Narrow klass base: 0x00007f5a33000000, Narrow klass shift: 0, Narrow klass range: 0x100000000
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit] Heap
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  garbage-first heap   total 1048576K, used 7217K [0x00000000c0000000, 0x0000000100000000)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]   region size 1024K, 5 young (5120K), 0 survivors (0K)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  Metaspace       used 561K, committed 704K, reserved 1114112K
[2025-06-23T17:10:33.792+0000][2927][gc,heap,exit]   class space    used 46K, committed 128K, reserved 1048576K

[2025-06-23T17:10:32.188+0000][2927][gc,init] CardTable entry size: 512
[2025-06-23T17:10:32.190+0000][2927][gc     ] Using G1
[2025-06-23T17:10:33.013+0000][2927][gc,init] Version: 21.0.7+6-Ubuntu-0ubuntu120.04 (release)
[2025-06-23T17:10:33.013+0000][2927][gc,init] CPUs: 4 total, 4 available
[2025-06-23T17:10:33.013+0000][2927][gc,init] Memory: 8700M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Large Page Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] NUMA Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] Compressed Oops: Enabled (32-bit)
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Region Size: 1M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Min Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Initial Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Max Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Pre-touch: Enabled
[2025-06-23T17:10:33.014+0000][2927][gc,init] Parallel Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Workers: 1
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Refinement Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Periodic GC: Disabled
[2025-06-23T17:10:33.223+0000][2927][gc,metaspace] CDS archive(s) mapped at: [0x00007f5a33000000-0x00007f5a33c97000-0x00007f5a33c97000), size 13201408, SharedBaseAddress: 0x00007f5a33000000, ArchiveRelocationMode: 1.
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Compressed class space mapped at: 0x00007f5a34000000-0x00007f5a74000000, reserved size: 1073741824
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Narrow klass base: 0x00007f5a33000000, Narrow klass shift: 0, Narrow klass range: 0x100000000
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit] Heap
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  garbage-first heap   total 1048576K, used 7217K [0x00000000c0000000, 0x0000000100000000)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]   region size 1024K, 5 young (5120K), 0 survivors (0K)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  Metaspace       used 561K, committed 704K, reserved 1114112K
[2025-06-23T17:10:33.792+0000][2927][gc,heap,exit]   class space    used 46K, committed 128K, reserved 1048576K

[2025-06-23T17:10:32.188+0000][2927][gc,init] CardTable entry size: 512
[2025-06-23T17:10:32.190+0000][2927][gc     ] Using G1
[2025-06-23T17:10:33.013+0000][2927][gc,init] Version: 21.0.7+6-Ubuntu-0ubuntu120.04 (release)
[2025-06-23T17:10:33.013+0000][2927][gc,init] CPUs: 4 total, 4 available
[2025-06-23T17:10:33.013+0000][2927][gc,init] Memory: 8700M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Large Page Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] NUMA Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] Compressed Oops: Enabled (32-bit)
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Region Size: 1M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Min Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Initial Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Max Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Pre-touch: Enabled
[2025-06-23T17:10:33.014+0000][2927][gc,init] Parallel Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Workers: 1
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Refinement Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Periodic GC: Disabled
[2025-06-23T17:10:33.223+0000][2927][gc,metaspace] CDS archive(s) mapped at: [0x00007f5a33000000-0x00007f5a33c97000-0x00007f5a33c97000), size 13201408, SharedBaseAddress: 0x00007f5a33000000, ArchiveRelocationMode: 1.
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Compressed class space mapped at: 0x00007f5a34000000-0x00007f5a74000000, reserved size: 1073741824
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Narrow klass base: 0x00007f5a33000000, Narrow klass shift: 0, Narrow klass range: 0x100000000
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit] Heap
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  garbage-first heap   total 1048576K, used 7217K [0x00000000c0000000, 0x0000000100000000)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]   region size 1024K, 5 young (5120K), 0 survivors (0K)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  Metaspace       used 561K, committed 704K, reserved 1114112K
[2025-06-23T17:10:33.792+0000][2927][gc,heap,exit]   class space    used 46K, committed 128K, reserved 1048576K

[2025-06-23T17:10:32.188+0000][2927][gc,init] CardTable entry size: 512
[2025-06-23T17:10:32.190+0000][2927][gc     ] Using G1
[2025-06-23T17:10:33.013+0000][2927][gc,init] Version: 21.0.7+6-Ubuntu-0ubuntu120.04 (release)
[2025-06-23T17:10:33.013+0000][2927][gc,init] CPUs: 4 total, 4 available
[2025-06-23T17:10:33.013+0000][2927][gc,init] Memory: 8700M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Large Page Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] NUMA Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] Compressed Oops: Enabled (32-bit)
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Region Size: 1M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Min Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Initial Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Max Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Pre-touch: Enabled
[2025-06-23T17:10:33.014+0000][2927][gc,init] Parallel Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Workers: 1
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Refinement Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Periodic GC: Disabled
[2025-06-23T17:10:33.223+0000][2927][gc,metaspace] CDS archive(s) mapped at: [0x00007f5a33000000-0x00007f5a33c97000-0x00007f5a33c97000), size 13201408, SharedBaseAddress: 0x00007f5a33000000, ArchiveRelocationMode: 1.
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Compressed class space mapped at: 0x00007f5a34000000-0x00007f5a74000000, reserved size: 1073741824
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Narrow klass base: 0x00007f5a33000000, Narrow klass shift: 0, Narrow klass range: 0x100000000
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit] Heap
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  garbage-first heap   total 1048576K, used 7217K [0x00000000c0000000, 0x0000000100000000)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]   region size 1024K, 5 young (5120K), 0 survivors (0K)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  Metaspace       used 561K, committed 704K, reserved 1114112K
[2025-06-23T17:10:33.792+0000][2927][gc,heap,exit]   class space    used 46K, committed 128K, reserved 1048576K

[2025-06-23T17:10:32.188+0000][2927][gc,init] CardTable entry size: 512
[2025-06-23T17:10:32.190+0000][2927][gc     ] Using G1
[2025-06-23T17:10:33.013+0000][2927][gc,init] Version: 21.0.7+6-Ubuntu-0ubuntu120.04 (release)
[2025-06-23T17:10:33.013+0000][2927][gc,init] CPUs: 4 total, 4 available
[2025-06-23T17:10:33.013+0000][2927][gc,init] Memory: 8700M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Large Page Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] NUMA Support: Disabled
[2025-06-23T17:10:33.013+0000][2927][gc,init] Compressed Oops: Enabled (32-bit)
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Region Size: 1M
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Min Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Initial Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Heap Max Capacity: 1G
[2025-06-23T17:10:33.013+0000][2927][gc,init] Pre-touch: Enabled
[2025-06-23T17:10:33.014+0000][2927][gc,init] Parallel Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Workers: 1
[2025-06-23T17:10:33.014+0000][2927][gc,init] Concurrent Refinement Workers: 4
[2025-06-23T17:10:33.014+0000][2927][gc,init] Periodic GC: Disabled
[2025-06-23T17:10:33.223+0000][2927][gc,metaspace] CDS archive(s) mapped at: [0x00007f5a33000000-0x00007f5a33c97000-0x00007f5a33c97000), size 13201408, SharedBaseAddress: 0x00007f5a33000000, ArchiveRelocationMode: 1.
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Compressed class space mapped at: 0x00007f5a34000000-0x00007f5a74000000, reserved size: 1073741824
[2025-06-23T17:10:33.224+0000][2927][gc,metaspace] Narrow klass base: 0x00007f5a33000000, Narrow klass shift: 0, Narrow klass range: 0x100000000
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit] Heap
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  garbage-first heap   total 1048576K, used 7217K [0x00000000c0000000, 0x0000000100000000)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]   region size 1024K, 5 young (5120K), 0 survivors (0K)
[2025-06-23T17:10:33.791+0000][2927][gc,heap,exit]  Metaspace       used 561K, committed 704K, reserved 1114112K
[2025-06-23T17:10:33.792+0000][2927][gc,heap,exit]   class space    used 46K, committed 128K, reserved 1048576K

[Boost]

urdevops — Fri, 13 Dec 2024 21:00:22 +0000

Learning Devops projects from beginner to advance.

urdevops ・ Dec 13

#devops #beginners #automation #bash

Learning Devops projects from beginner to advance.

urdevops — Fri, 13 Dec 2024 20:59:47 +0000

Hi, I am self-learning devops for about a year now. This is a series of posts about devops-related projects from beginner to advanced for devops skill development.

I will also share some deep insights about devops and cloud computing.

Feel free to share your comments and insights.

Thanks.