Vesta Control Panel - Forum

The concentrated explosion is mainly caused by two large mainframe suppliers, feeling that their DNS servers have been hijacked. Vestacp.com domain name IP has been changed.

hoster: hetzner OVH

I feel that some core code is not public, for everyone's safety.

And the website of phpMyAdmin is fixed and can be bursting.

ScIT wrote: ↑

Thu Oct 11, 2018 7:06 am

pqpk2009 wrote: ↑

Wed Oct 10, 2018 2:17 pm

/usr/bin/dhcprenew

My infected server does not have this file.

The 2 we checked had it.

I can't find it

I designated IP to log on to SSHD, closing 8083 ports, but receiving notification is using DDOS.

I installed only two days.

Stesh wrote: ↑

Thu Oct 11, 2018 9:11 am

chkconfig vesta off?
chkconfig vesta on?

yes, thank you!!!

How to start / restart automatically does not enable service Vesta

/usr/bin/dhcprenew

My infected server does not have this file.

ScIT wrote: ↑

Wed Oct 10, 2018 8:03 am

pqpk2009 wrote: ↑

Wed Oct 10, 2018 8:01 am

SSHD permissions were closed, but there was still an attack.

Problem finding procedure

/usr/local/vesta/nginx/sbin/vesta-nginx

was this a new attack? if yes, please send us server access using pm.

I have sent PM server root information.

Tell me your IP, I add it to SSHD.

> Format: ASN | IP | Timestamp (UTC) | RPC response > 24940 | *.*.*.* | 2018-10-09 06:41:17 | 100000 4 111/udp; 100000 3 111/udp; 100000 2 111/udp; 100000 4 111/udp; 100000 3 111/udp; 100000 2 111/udp; > 24940 | *.*.*.* | 2018-10-09 06:56:55 | 100000 4 111/udp; 100000 3 111/udp; 100000 2 111/udp; 1...

was this a new attack? if yes, please send us server access using pm. > Format: ASN | IP | Timestamp (UTC) | RPC response > 24940 | *.*.*.* | 2018-10-09 06:41:17 | 100000 4 111/udp; 100000 3 111/udp; 100000 2 111/udp; 100000 4 111/udp; 100000 3 111/udp; 100000 2 111/udp; > 24940 | *.*.*.* | 2018-10...