Vesta Control Panel - Forum

# Changing domain in web.conf
sed -i "s/DOMAIN='$domain'/DOMAIN='$new_domain'/" $USER_DATA/web.conf
new_alias=$(echo "$ALIAS,$domain" |\
sed -e "s/,/\n/g"|\
sed -e "s/^$new_domain$//g"|\
sed -e "/^$/d"|\
sed -e ':a;N;$!ba;s/\n/,/g')

# Updating domain alias
if [ "$ALIAS" != "$new_alias ...

The concentrated explosion is mainly caused by two large mainframe suppliers, feeling that their DNS servers have been hijacked. Vestacp.com domain name IP has been changed.

hoster: hetzner OVH

I feel that some core code is not public, for everyone's safety.

And the website of phpMyAdmin is fixed and can be bursting.

ScIT wrote: Thu Oct 11, 2018 7:06 am

pqpk2009 wrote: Wed Oct 10, 2018 2:17 pm /usr/bin/dhcprenew

My infected server does not have this file.

The 2 we checked had it.

I can't find it

I designated IP to log on to SSHD, closing 8083 ports, but receiving notification is using DDOS.

I installed only two days.

Stesh wrote: Thu Oct 11, 2018 9:11 am chkconfig vesta off?
chkconfig vesta on?

yes, thank you!!!

How to start / restart automatically does not enable service Vesta

/usr/bin/dhcprenew

My infected server does not have this file.

ScIT wrote: Wed Oct 10, 2018 8:03 am

pqpk2009 wrote: Wed Oct 10, 2018 8:01 am SSHD permissions were closed, but there was still an attack.

Problem finding procedure

/usr/local/vesta/nginx/sbin/vesta-nginx

was this a new attack? if yes, please send us server access using pm.

I have sent PM server root information.

Tell me your IP, I add it to SSHD.

> Format: ASN | IP | Timestamp (UTC) | RPC response
> 24940 | *.*.*.* | 2018-10-09 06:41:17 | 100000 4 111/udp; 100000 3 111/udp; 100000 2 111/udp; 100000 4 111/udp; 100000 3 111/udp; 100000 2 111/udp;
> 24940 | *.*.*.* | 2018-10-09 06:56:55 | 100000 4 111/udp; 100000 3 111/udp; 100000 2 111 ...