Security and privacy

In your other posting about this, you've followed up and reported that provider had issues and that's why your server was having issues.   You probably should follow up here as well.

But ... since you asked ...

Internet isn't a friendly place - it never was!  Just that there is more news about breaches/hacks/blackhats, etc. than ever before and for whatever reasons - religious/political/military, etc..

Here's some things I do trying to be proactive ...

I install a thing called Logwatch and have it send it's daily reports of yesterdays activity to an account on the server.   Don't have time to look at all the logs to see who is attempting to do what and Logwatch helps.

Security by Obsurity ... I don't run moodle's at document root of a server, but, rather in a directory ... NOT named 'moodle' (that's like a neon sign saying here's how to attack me!).

At document root, I have a semi-static page ... NOT a WordPress.

The script kiddies and bots seem to point their pokes and probes to document root ... they won't find anything there of value.

I install a thing called 'multitail' - has to be compiled ... it alllows me to 'watch' server logs in realtime on one terminal screen.  I can see web server access log and error log, the mail log, the secure log all on one screen.

If I see an ip address appear in all four of those logs, probably a bot or a blackhat and I'll investigate that IP ... if I am un-comfortable with what I see, I'll block that IP address (drop zone) - even if it's from an IP address used by a student/teacher/trainer (my job is to protect the server!!!!)!

The moodle forces login ... minimal display of front page.

Now before you ask, no I don't have tutorials/videos/etc. on how to do above so don't ask!  

Important ... keep the moodle up to date - use git for that.  Keep your distro up to date ... that's outside of moodle.  Try to be proactive ... not re-active.

My 2 'sense'!

'SoS', Ken