The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Server Hacked --> New Problems

Discussion in 'Security' started by musioc, Aug 4, 2011.

  1. musioc

    musioc Well-Known Member

    Joined:
    Aug 4, 2011
    Messages:
    105
    Likes Received:
    0
    Trophy Points:
    16
    Hello, one of my servers hacked 2 days ago, all sites (all index.php files) was defaced.
    Attacker gain root access by perl

    He made many problems for us, deleted log files, deleted some required files, ...
    yum is not working..

    root[~]#yum
    so I can not use easy apache
    easy apache show this error :
    How can I update my box?
    how can I solve yum problems?

    thank you
     
  2. musioc

    musioc Well-Known Member

    Joined:
    Aug 4, 2011
    Messages:
    105
    Likes Received:
    0
    Trophy Points:
    16
    Another problem:
    One on sites on the server (only one) is very slow now! visitors always should wait 30 to 32 seconds for site to response
    I test site link in HostTracker - Index (beta) to see dns, head and data response time.

    result :
    (dns, head, data) total
    (0 ms, 30088 ms, 75 ms) 30163 ms
    (1 ms, 30080 ms, 92 ms) 30173 ms
    (49 ms, 30093 ms, 96 ms) 30238 ms
    (0 ms, 30132 ms, 218 ms) 30350 ms
    .
    .
    .
    ...

    this site has a dedicated ip.
    only main domain has this problem. all subdomains (on such ip) are ok.
     
  3. musioc

    musioc Well-Known Member

    Joined:
    Aug 4, 2011
    Messages:
    105
    Likes Received:
    0
    Trophy Points:
    16
    Another problem:
    One on sites on the server (only one) is very slow now! visitors always should wait 30 to 32 seconds for site to response
    I test site link in /http://www.host-tracker.com (beta) to see dns, head and data response time.

    result :
    (dns, head, data) total
    (0 ms, 30088 ms, 75 ms) 30163 ms
    (1 ms, 30080 ms, 92 ms) 30173 ms
    (49 ms, 30093 ms, 96 ms) 30238 ms
    (0 ms, 30132 ms, 218 ms) 30350 ms
    .
    .
    .
    ...

    this site has a dedicated ip.
    only main domain has this problem. all subdomains (on such ip) are ok.


    sometimes that problematic site make error 500
    this is only error in apache error log for it:
    Premature end of script headers
     
    #3 musioc, Aug 4, 2011
    Last edited: Aug 4, 2011
  4. k-planethost

    k-planethost Well-Known Member

    Joined:
    Sep 22, 2009
    Messages:
    199
    Likes Received:
    4
    Trophy Points:
    18
    Location:
    Athens Greece
    i think is better to format the drive and reinstall os kernel cpanel
     
  5. musioc

    musioc Well-Known Member

    Joined:
    Aug 4, 2011
    Messages:
    105
    Likes Received:
    0
    Trophy Points:
    16
    I Can not reload os, coz there are many sites on this server that are updating time to time..
    latest problem solved(should wait 30 to 32 seconds for site to response)

    now the only problem is yum and updating via easyapache
     
  6. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Hello musioc,

    You should probably reinstall yum entirely. It looks like they modified files it uses so that it won't work.

    This wiki has a good article on installing it:

    Install yum - OpenVZ Wiki

    Otherwise, you'll want to get ahold of your provider to ask for assistance. cPanel doesn't provide yum itself, so this outside the scope of our support boundaries (anything OS-related is the provider's responsibility to correct).

    Thanks!
     
  7. musioc

    musioc Well-Known Member

    Joined:
    Aug 4, 2011
    Messages:
    105
    Likes Received:
    0
    Trophy Points:
    16
    Thank you very much cPanelTristan,
    According to Install yum - OpenVZ Wiki, I tested this step by step:
    but always says:
     
  8. expssh

    expssh Registered

    Joined:
    Aug 5, 2011
    Messages:
    3
    Likes Received:
    1
    Trophy Points:
    3
  9. whwrobert

    whwrobert Active Member

    Joined:
    Aug 21, 2009
    Messages:
    26
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    USA
Loading...

Share This Page